CVE-2025-24071-Exploit

CVE-2025-24071-Exploit Đây chỉ là tài liệu mang tính chất học tập. Chỉ xem tham khảo và đừng làm phiền chính quyền. This content is for educational purposes only. Use for reference only and do not contact the police. Vulnerability Details CVE ID : CVE-2025-24071 Vulnerable System : NTLM Hash Leak...

cve-2003-0282

This is the README file for the 22 May 2004 public release of the Info-ZIP group's portable UnZip zipfile-extraction program and related utilities. unzip551.zip portable UnZip, version 5.51, source code distribution unzip551.tar.Z same as above, but compress'd tar format unzip551.tar.gz same as...

CVE-2019-14751_PoC

CVE-2019-14751PoC A Proof of Concept for CVE-2019-14751 Vulnerability Description NLTK Downloader before version 3.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction. For...

evilarc

evilarc Purpose evilarc lets you create a zip file that contains files with directory traversal characters in their embedded path. Most commercial zip program winzip, etc will prevent extraction of zip files whose embedded files contain paths with directory traversal characters. However, many...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...

CVE-2026-48908-SP-Page-Builder-Joomla

CVE-2026-48908: SP Page Builder Joomla 未授权远程代码执行 CVE-2026-48908 漏洞的利用验证（PoC）代码，针对 Joomla SP Page Builder 组件的未授权远程代码执行漏洞。 漏洞概述 CVE-2026-48908 是一个严重安全漏洞，允许未授权的攻击者在易受攻击的 Joomla 安装上通过 SP Page Builder 组件对 ZIP 文件提取的处理不当来执行任意代码。 技术细节 CVE ID： CVE-2026-48908 组件： comsppagebuilder 受影响版本： = 6.6.1 修复版本： 6.6.2...

CVE-2025-24071-msfvenom

CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vulnerability in Windows Explorer that leaks NTLM hashes when a malicious .library-ms file is extracted from a ZIP archive. Developed by: FOLKS-IWD...

winDED

winDED 使用 Python 编写的针对 CVE-2023-38831 的自定义漏洞利用程序。 简介： WinRAR 是一款归档软件，允许用户创建文件归档以及文件和文件夹的压缩版本，从而让用户能够轻松传输文件/文件夹，或将其以压缩形式存储。我是说，你肯定早就听说过它。它在压缩文件中内嵌校验和以确保文件完整性，让压缩文件或文件夹更易于使用。它还支持可选加密。但众所周知，没有什么东西是绝对安全的。 WinRAR 漏洞（即 CVE-2023-38831）于 2023 年 4 月被一位化名为 "Goodbyeselene" 的安全研究人员在分析 WinRAR 代码时发现。该漏洞是 WinRA...

CVE-2025-49071

CVE-2025-49071 Flozen 1.5.1 - Unauthenticated Arbitrary File Upload Description : Flozen Theme 1.5.1 - Unauthenticated Arbitrary File Upload Description The Flozen Theme for WordPress versions up to and including 1.5.1 is vulnerable to unauthenticated arbitrary file upload, due to missing...

CVE-2020-36842

CVE-2020-36842 CVE-2020-36842 - WPvivid Plugin Arbitrary File Upload Vulnerability Overview CVE ID: CVE-2020-36842 Disclosure / Update Date: October 16, 2024 Affected Plugin: WPvivid - Migration, Backup, Staging Affected Versions: Up to and including 0.9.35 Vulnerability Type: Arbitrary File Uplo...

CVE-2025-24071

CVE-2025-24071 This Python script is designed to demonstrate the CVE-2025-24071 vulnerability in Windows Explorer. This vulnerability allows an attacker to capture netNTLMv2 credentials from a victim without any direct interaction from the victim. Description The CVE-2025-24071 vulnerability exis...

CVE-2025-65346

CVE-2025-65346 – Authenticated Path Traversal From UnZip Function Leading to Arbitrary File Write in laravel-file-manager v3.3.1 🧭 Overview A Path Traversal vulnerability in the unzip/extract functionality of the affected application allows an attacker to write files to arbitrary filesystem...

CVE-2025-57055

CVE-2025-57055: Authenticated Remote Code Execution in WonderCMS 3.5.0 Vulnerability Mechanics An authenticated Remote Code Execution RCE vulnerability exists in WonderCMS v3.5.0. The issue stems from how the application handles remote theme/module installations via JSON descriptors. When an admi...

CVE-2026-74859

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

CVE-2026-74859 Gnome-tweaks: path traversal in theme installer

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

EUVD-2026-72673

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

CVE-2026-74859

gnome-tweaks contains a path traversal vulnerability in its shell theme installer. The installer extracts user-supplied ZIP archives without validating archive member paths, allowing a crafted theme archive to write files outside ~/.themes via ../ sequences, absolute paths, or symlink entries. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-74859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can...

CVE-2026-86437

Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing non-Superadmin administrators to upload and extract arbitrary zip archives over the live application source code. Attackers can upload a malicious archive...

CVE-2026-86437

Lara Dashboard before 1.3.2 incorrectly authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing any non-Superadmin administrator to upload and extract arbitrary zip archives over the live application source tree. An attacker with this per...