521 matches found
GHSA-2VCX-H8P2-9PG9 Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()
Summary An authenticated admin.super user can crash Grav or fill the disk by uploading a specially crafted ZIP archive through the Direct Install tool. The method Installer::unZip calls ZipArchive::extractTo without any limit on uncompressed size, entry count, or directory depth, enabling Zip Bom...
Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()
Summary An authenticated admin.super user can crash Grav or fill the disk by uploading a specially crafted ZIP archive through the Direct Install tool. The method Installer::unZip calls ZipArchive::extractTo without any limit on uncompressed size, entry count, or directory depth, enabling Zip Bom...
CVE-2026-81875
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java can consume attacker-controlled Smart Health Card JWT content whose header...
wheelaudit
wheelaudit Python Wheel File Security Scanner — scan .whl files for security issues before installation. Motivated by recent CVEs in Python wheel handling: CVE-2026-24049 : Path traversal in wheel unpack allows permission manipulation of system files CVE-2026-1703 : Path traversal when pip instal...
CVE-2025-63914
CVE-2025-63914 Divulgación pública y parche para CVE-2025-63914: Vulnerabilidad de bomba ZIP en Cinnamon/kotaemon. Crédito Wang Yuanrong Resumen La función mayextractzip no aplica límites en la descompresión de ZIP, lo que permite que una bomba ZIP maliciosa provoque un consumo excesivo de recurs...
zip_bomb
ZIP Bomb Creator ZIP Bomb Creator 是一款用于创建 ZIP 文件的工具，该文件体积很小，但在解压时会急剧膨胀。这对于安全实验以及测试文件系统对 ZIP 炸弹攻击的抵御能力非常有用。 功能特性 创建可配置文件数量和大小的 ZIP 炸弹。 支持多种大小单位（KB、MB、GB）。 使用 ZIP64 以处理大型文件。 输入验证，确保数据输入正确。 显示横幅，使界面更具吸引力。 使用方法 1. 使用 Python 2.7 运行脚本： root@kitploit: python zipbomb.py 2. 输入要在 ZIP 中创建的文件数量。 3. 输入每个文件的大小...
CVE-2026-89321
Publishing limits the compressed size of a VSIX ovsx.publishing.max-content-size, 512 MB by default but nothing limited how large an entry becomes when opened. On the first request to /vscode/unpkg/namespace/extension/version/path, WebResourceService opened the entry with ZipFile.getInputStream a...
EUVD-2026-77328
Publishing limits the compressed size of a VSIX ovsx.publishing.max-content-size, 512 MB by default but nothing limited how large an entry becomes when opened. On the first request to /vscode/unpkg/namespace/extension/version/path, WebResourceService opened the entry with ZipFile.getInputStream a...
CVE-2026-89321
Eclipse OpenVSX is vulnerable to a disk exhaustion issue in its WebResourceService . When a VSIX is first requested via the unpkg endpoint, the service opens a zip entry with ZipFile.getInputStream() and passes the decompressed stream to Files.copy() without counting bytes written. The resulting ...
CVE-2026-82520 parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachments
parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a...
CVE-2026-82520
parsedmarc before 11.0.1 is vulnerable to a Zip Bomb Denial of Service via compressed email attachments. The root cause is that parsedmarc decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incomin...
CVE-2026-82520 parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachments
parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a...
CVE-2026-59274 Unbounded decompression in UnZipTransformer enables zip-bomb DoS
The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration...
CVE-2026-59274
Spring Integration is affected by an unbounded decompression flaw in the UnZipTransformer component, which does not limit decompressed entry size or entry count when processing zip archives. An attacker with low privileges can send a crafted zip archive (zip-bomb) over the network to exhaust JVM ...
EUVD-2026-66212
LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in internal/importer/zipextractor.go opens each entry and copies it to the destination with io.Copy, which runs to the end of the decompressed stream, so only the size of the uploaded...
CVE-2026-80189
LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in internal/importer/zipextractor.go opens each entry and copies it to the destination with io.Copy, which runs to the end of the decompressed stream, so only the size of the uploaded...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python2 (UTSA-2026-093150)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093150 advisory. Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service resource consumption via a ZIP bomb. Tenable has extracted the preceding...
CVE-2026-80189
LeafWiki 0.10.0 through 0.12.0 is vulnerable to uncontrolled resource consumption via unbounded ZIP extraction. The function ZipExtractor.ExtractToDir in internal/importer/zip_extractor.go copies each decompressed entry with io.Copy without limiting output size. Although the upload is capped at 5...
PT-2026-81903
LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in internal/importer/zip extractor.go opens each entry and copies it to the destination with io.Copy, which runs to the end of the decompressed stream, so only the size of the uploade...
