7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC CVE-2025-0411 详细信息 “此漏洞（CVSS 评分 7.0）允许远程攻击者绕过受影响 7-Zip 安装上的 Mark-of-the-Web 保护机制。用户交互是利用此漏洞的必要条件，目标必须访问恶意页面或打开恶意文件。 该特定缺陷存在于存档文件的处理过程中。当从带有 Mark-of-the-Web 的精心构造的存档中提取文件时，7-Zip 不会将 Mark-of-the-Web 传播到提取的文件中。攻击者可以利用此漏洞在当前用户上下文中执行任意代码。” 受影响版本 24.09 之前的所有版本均被视为易受攻击。 缓解措施 “更新...

CVE-2024-25082

⚠️ CVE-2024-25082 - FontForge ZIP Ejecución Remota de Código PoC Exploit de Prueba de Concepto para CVE-2024-25082 , una vulnerabilidad que afecta a FontForge y permite Ejecución Remota de Código RCE a través de un archivo ZIP manipulado. Este repositorio demuestra cómo se puede explotar la...

7zip-CVE-2025-11001

Uso: root@kitploit: python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Explotando 7-zip La vulnerabilidad solo es explotable en Windows y tiene un inconveniente importante. El fallo solo puede explotarse cuando 7-Zip se ejecuta con privilegios de administrador para que...

Exploit-CVE-2024-31777

CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestricted File Upload PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-31777, a security vulnerability discovered in GUnet OpenEclass E-learning platform with a CVSS of 9.8 which affects the endpoint of...

CVE-2026-65970

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted ZIP-compressed TIFF image file. When processed with TIFF multithreading enabled, the software can prematurely release memory while background...

7-Zip-CVE-2025-0411-POC

🦀 Rust 宏 无后坐力 image Download 🚀 概述 「Rust 宏 无后坐力」提供了一款无缝体验，用于减少 Rust 游戏中的武器后坐力。该工具利用高效的脚本和定制宏，让玩家在游戏中获得更出色的控制力和精准度。它专为可靠性而优化，更新迅速，并充分考虑了用户安全。通过可调节的灵敏度、可自定义的按键绑定以及武器类型的自动切换检测，提升您的游戏内表现！ 🖥️ 操作系统兼容性表 🖥️ 操作系统| 🏁 支持状态| 🔑 安装说明 ---|---|--- Windows 10 / 11| ⚡ 完全支持| 简易安装指南 macOS Intel/ARM| 🛠️ 实验性| 需要 Rosetta...

ROOT-APP-NPM-CVE-2026-77301 CVE-2026-77301 in adm-zip - Patched by Root

Root has patched CVE-2026-77301 in the adm-zip package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-39244 CVE-2026-39244 in adm-zip - Patched by Root

Root has patched CVE-2026-39244 in the adm-zip package for Root:npm. Multiple fixed versions available...

ZipCracker

ZipCracker ZipCracker es una utilidad de fuerza bruta de contraseñas, simple pero potente, para descifrar archivos ZIP protegidos por contraseña. Está construido con Qt e integra un motor de descifrado personalizado, con soporte tanto para CLI como para GUI. ⚡ Aviso legal: Esta herramienta está...

CVE-2023-38831

CVE-2023-38831 This is an easy to use tool that creates a CVE-2023-38831 exploit that affects all WinRAR versions prior to 6.23. Here's more info about the CVE-2023-38831 exploit RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within...

CVE-2026-79306: Undefined Security Weakness

CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property...

EUVD-2026-85402

CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property...

CVE-2025-63914

CVE-2025-63914 CVE-2025-63914 的公开披露与补丁：Cinnamon/kotaemon 中的 ZIP 炸弹漏洞。 致谢 Wang Yuanrong 摘要 mayextractzip 函数未对 ZIP 解压缩施加限制，使恶意的 ZIP 炸弹能够触发过多的资源消耗并导致拒绝服务。 详情 \libs\ktem\ktem\index\file\ui.py 文件中的 mayextractzip 函数未检查上传 ZIP 文件的内容。尽管这些内容会被解压到一个临时文件夹中（该文件夹在每次解压前会清空），但成功上传一个 ZIP...

CVE-2026-77301

A flaw was found in adm-zip, a JavaScript library for handling ZIP archives. The getData function in zipEntry.js allocates memory based on the declared uncompressed size in a ZIP entry's central directory without validating this value against the actual compressed data. A remote attacker can...

CVE-2019-14751_PoC

CVE-2019-14751PoC Una Prueba de Concepto para CVE-2019-14751 Descripción de la Vulnerabilidad NLTK Downloader anterior a la versión 3.5 es vulnerable a un directory traversal, permitiendo a atacantes escribir archivos arbitrarios mediante un ../ dot dot slash en un paquete NLTK archivo ZIP que se...

CVE-2025-24071

CVE-2025-24071 Vulnerabilidad de suplantación del Explorador de Archivos de Windows - CVE-2025-24071 Filtrar el hash NTLM de Windows mediante la extracción de un archivo ZIP o RAR manipulado, y explotando una vulnerabilidad en el manejo de archivos .library-ms un tipo de archivo utilizado por...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Activa la autenticación SMB automática a un recurso compartido controlado por el atacante. No se requiere interacción: el Explorador de Windows inicia esta autenticación NTLM automáticamente. Resulta en la filtración del hash NTLMv2 divulgación de información...

CVE-2023-38831-POC

描述 名称 : CVE-2023-38831 CVSS 评分 : 7.8 受影响版本 : Winrar 6.23 CVE-2023-38831 是一个零日漏洞，影响所有低于 6.23 版本的 WinRAR。 问题出在 ZIP 格式的处理上，攻击者可以利用受影响的压缩包来分发恶意软件。恶意行为者可以在 ZIP 压缩包内将恶意文件伪装成与合法文件相似的名字，诱骗用户打开似乎安全的文件，从而执行有害内容。此漏洞自 2023 年 4 月以来已被积极利用，尤其针对金融行业，给打开不受信任压缩文件的用户带来重大风险。升级到 WinRAR 6.23 或更高版本可通过改进提取过程中的文件名清理来缓解此漏...

Security Bulletin: extract-zip-2.0.1.tgz (Publicly disclosed vulnerability found by Scanner)

Summary extract-zip through 2.0.1 only checks the parent directory of each archive entry, allowing a symlink-then-regular-file pair with identical names to write through the planted symlink and achieve arbitrary file write outside the destination directory. CVSS: 8.1 High, CWE-22. Vulnerability...

Security Bulletin: extract-zip-2.0.1.tgz (Publicly disclosed vulnerability found by Scanner)

Summary extract-zip 2.0.1 does not validate symlink targets during zip extraction, allowing a malicious archive with relative symlink paths to read or write arbitrary files outside the extraction directory. CVSS: 8.1 High, CWE-22. Vulnerability Details CVEID:CVE-2026-56876 DESCRIPTION: extract-zi...