1877 matches found
EUVD-2022-29161
Malicious code in bioql PyPI...
EUVD-2023-56311
Malicious code in bioql PyPI...
EUVD-2022-0498
Malicious code in bioql PyPI...
EUVD-2023-43075
Malicious code in bioql PyPI...
EUVD-2022-40066
Malicious code in bioql PyPI...
EUVD-2022-2734
Malicious code in bioql PyPI...
EUVD-2022-5967
Malicious code in bioql PyPI...
EUVD-2023-28326
Malicious code in bioql PyPI...
EUVD-2025-22352
Malicious code in bioql PyPI...
Researchers Warn of Self-Spreading WhatsApp Malware Named SORVEPOTEL
Brazilian users have emerged as the target of a new self-propagating malware dubbed SORVEPOTEL that spreads via the popular messaging app WhatsApp. The campaign, codenamed Water Saci by Trend Micro, weaponizes the trust with the platform to extend its reach across Windows systems, adding the atta...
GHSA-MJQP-26HC-GRXG Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
Summary Picklescan's ability to scan ZIP archives for malicious pickle files is compromised when the archive contains a file with a bad Cyclic Redundancy Check CRC. Instead of attempting to scan the files within the archive, whatever the CRC is, Picklescan fails in error and returns no results...
Linux Distros Unpatched Vulnerability : CVE-2021-4217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows ...
MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers
Cybersecurity researchers are calling attention to a sophisticated social engineering campaign that's targeting supply chain-critical manufacturing companies with an in-memory malware dubbed MixShell. The activity has been codenamed ZipLine by Check Point Research. "Instead of sending unsolicited...
Malicious code in down-load-available-zip-now-47073-anita-qnknl-xgxkin (npm)
The package down-load-available-zip-now-47073-anita-qnknl-xgxkin was found to contain malicious code...
Malicious code in down-load-available-zip-now-242367-fad-bpemi-awgouw (npm)
The package down-load-available-zip-now-242367-fad-bpemi-awgouw was found to contain malicious code...
CVE-2011-10016
CVE-2011-10016 affects Real Networks Netzip Classic 7.5.1.86. A stack-based buffer overflow occurs while parsing a specially crafted ZIP archive, triggered by a file name exceeding the expected buffer size. Exploitation allows arbitrary code execution under the victim user's context when the ZIP ...
CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow
Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...
WinRAR 安全漏洞
WinRAR is a file compressor from WinRAR. The product supports compression and decompression of files in RAR, ZIP, and other formats, among others. A security vulnerability exists in WinRAR that stems from a path traversal issue that could lead to arbitrary code execution...
(0Day) Microsoft Windows ZIP File Insufficient UI Warning Remote Code Execution Vulnerability
This vulnerability allows remote attackers to bypass the SmartScreen security feature on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...