GHSA-QFXX-C367-67F8 Appium: Symlink based Zip Slip in @appium/support ZIP extraction

Summary CVE-2026-30973 GHSA-rfx7-4xw3-gh4m was a plain path traversal in the entry name. The containment check built an Error object without throwing it, so an entry literally named something like ../evil.txt was written outside the destination. That issue was fixed in @appium/support 7.0.6 by...

Appium: Symlink based Zip Slip in @appium/support ZIP extraction

Summary CVE-2026-30973 GHSA-rfx7-4xw3-gh4m was a plain path traversal in the entry name. The containment check built an Error object without throwing it, so an entry literally named something like ../evil.txt was written outside the destination. That issue was fixed in @appium/support 7.0.6 by...

EUVD-2026-101529

Appium: Symlink based Zip Slip in @appium/support ZIP extraction...

CVE-2025-24071-msfvenom

CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vulnerability in Windows Explorer that leaks NTLM hashes when a malicious .library-ms file is extracted from a ZIP archive. Developed by: FOLKS-IWD...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...

CVE-2025-57055

CVE-2025-57055: Authenticated Remote Code Execution in WonderCMS 3.5.0 Vulnerability Mechanics An authenticated Remote Code Execution RCE vulnerability exists in WonderCMS v3.5.0. The issue stems from how the application handles remote theme/module installations via JSON descriptors. When an admi...

cve-2003-0282

This is the README file for the 22 May 2004 public release of the Info-ZIP group's portable UnZip zipfile-extraction program and related utilities. unzip551.zip portable UnZip, version 5.51, source code distribution unzip551.tar.Z same as above, but compress'd tar format unzip551.tar.gz same as...

CVE-2025-65346

CVE-2025-65346 – Authenticated Path Traversal From UnZip Function Leading to Arbitrary File Write in laravel-file-manager v3.3.1 🧭 Overview A Path Traversal vulnerability in the unzip/extract functionality of the affected application allows an attacker to write files to arbitrary filesystem...

winDED

winDED Custom exploit for CVE-2023-38831 using python. Introduction: WinRAR is an archiving software that allows users to create file archives and zipped versions of files and folders so that users can easily transport files/ folders or store them at a compressed size. I mean, you’ve heard of it,...

CVE-2026-104109 FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise validates archive entry names but extracts them directly into the authorized live destination before validating resolved paths. If that destination already contains a...

CVE-2026-104109

Prior to version 3.23.0 , the FileRise self-hosted web-based file manager is vulnerable to a flaw where it validates archive entry names but extracts them into the destination before validating resolved paths. An authenticated non-administrator with extract permissions can exploit this by uploadi...

CVE-2026-57491 FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite before ZipArchive::extractTo writes entries into the destination directory. An authenticated user...

CVE-2026-57491

The FileRise self-hosted web-based file manager is vulnerable to a bypass of the upload blocklist prior to version 3.16.0 . The ZipArchive::extractTo() function fails to apply the UploadNamePolicy::isAllowedForWrite() check during archive extraction. This allows an authenticated user with upload ...

CVE-2026-103975

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/support ZIP extraction accepts an archive entry that creates a symbolic link to a location outside the extraction directory and then accepts a later...

CVE-2026-103975 Appium: Symlink based Zip Slip in @appium/support ZIP extraction

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/support ZIP extraction accepts an archive entry that creates a symbolic link to a location outside the extraction directory and then accepts a later...

CVE-2026-103975 Appium: Symlink based Zip Slip in @appium/support ZIP extraction

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/support ZIP extraction accepts an archive entry that creates a symbolic link to a location outside the extraction directory and then accepts a later...

CVE-2026-103975

The @appium/support component in Appium (prior to version 7.2.6 ) is vulnerable to an arbitrary file write via a symlink-based ZIP Slip . The root cause is that the ZIP extraction process fails to validate the symlink target or the real destination during a lexical containment check. An attacker-...

PT-2026-113963

Name of the Vulnerable Software and Affected Versions Appium versions prior to 7.2.6 Description ZIP extraction in @appium/support allows an archive entry to create a symbolic link to a location outside the extraction directory. A subsequent regular-file entry can then resolve through this link...

CVE-2019-14751_PoC

CVE-2019-14751PoC A Proof of Concept for CVE-2019-14751 Vulnerability Description NLTK Downloader before version 3.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction. For...

CVE-2025-24071-Exploit

CVE-2025-24071-Exploit Đây chỉ là tài liệu mang tính chất học tập. Chỉ xem tham khảo và đừng làm phiền chính quyền. This content is for educational purposes only. Use for reference only and do not contact the police. Vulnerability Details CVE ID : CVE-2025-24071 Vulnerable System : NTLM Hash Leak...