1814 matches found
CVE-2025-25790
CVE-2025-25790 discusses an arbitrary file upload vulnerability affecting FoxCMS v1.2.5, specifically in the component path and file \controller\LocalTemplate.php. The issue permits an attacker to execute arbitrary code by uploading a crafted ZIP file. The CVE entry indicates a high-severity impa...
CVE-2025-25783
An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file...
MGASA-2025-0066 Updated python-zipp packages fix security vulnerability
Denial of Service via crafted zip file in jaraco/zipp. CVE-2024-5569...
CVE-2022-1373
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file...
CVE-2024-33615
A specially crafted Zip file containing path traversal characters can be imported to the CyberPower PowerPanel server, which allows file writing to the server outside the intended scope, and could allow an attacker to achieve remote code execution...
Relative Path Traversal
org.apache.solr, solr-core is vulnerable to Relative Path Traversal. The vulnerability is due to a lack of input sanitization in the "configset upload" API, which allows the arbitrary filepath write-access when processing ZIP files...
USN-7212-1 python2.7 vulnerabilities
It was discovered that Python incorrectly handled certain ZIP files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2019-9674 It was discovered that Python incorrectly handled certain inputs. If a user or an automated system...
CVE-2024-57728
SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file i.e. zip slip. This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user...
WordPress plugin Modula Image Gallery 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
PT-2025-41203
Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 25.01 7-Zip versions 21.02 through 25.00 Description 7-Zip contains a flaw in how it handles symbolic links within ZIP files. This issue allows attackers to perform directory traversal, potentially writing files to...
PT-2025-41204
Name of the Vulnerable Software and Affected Versions 7-Zip affected versions not specified Description The issue relates to incorrect handling of symbolic links when accessing files within ZIP archives. Exploitation can allow an attacker to execute arbitrary code if a user opens a specially...
unzip bug fix update
An update is available for unzip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The unzip utility is used to list, test, and extract files from zip archives. B...
CVE-2024-11984 SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM privilege via a crafted ZIP file...
python-libarchive 安全漏洞
python-libarchive is a Libarchive wrapper for Python open-sourced by SmartFile. A security vulnerability exists in python-libarchive version 4.2.1, which stems from allowing directory traversal of ZipFile.extractall and ZipFile.extract in a zip.py extraction...
CVE-2024-51365
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
github.com/jaraco/zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp
A flaw was found in jaraco/zipp. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is...
Moderate: Red Hat Security Advisory: RHOSP 17.1.4 (python-zipp) security update
An update for python-zipp is now available for Red Hat OpenStack Platform RHOSP 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
