CVE-2026-76147

A path traversal (ZIP Slip) vulnerability exists in the agent upgrade feature of Genian NAC/ZTNA . The root cause is insufficient authorization and integrity verification , which allows a remote attacker to achieve remote code execution . No specific patch versions or exploit links are provided i...

CVE-2026-76147 Genians, Inc Genian NAC/ZTNA Remote Code Execution

A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...

CVE-2026-76147 Genians, Inc Genian NAC/ZTNA Remote Code Execution

A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...

EUVD-2026-90489

A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...

CVE-2019-14751_PoC

CVE-2019-14751PoC CVE-2019-14751 の Proof of Concept 脆弱性の説明 バージョン 3.5 より前の NLTK Downloader はディレクトリトラバーサルに対して脆弱であり、 抽出中に誤って処理される NLTK パッケージ ZIP アーカイブ 内の ../ ドットドットスラッシュ を 介して、攻撃者が任意のファイルを書き込むことを可能にします。 詳細については以下を参照してください。 https://salvatoresecurity.com/zip-slip-in-nltk-cve-2019-14751/。 再現手順 1...

CVE-2026-25057

CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file write and enabling remote code execution. Details Archive entry names are used to construct filesystem...

WSO2-2021-1258

WSO2-2021-1258: WSO2 ESB における Zip Slip 脆弱性 WSO2 Management Console には、ZIP ファイルに基づくディレクトリトラバーサル Zip Slip 脆弱性が特定されました。特定のファイルを書き込み/上書きすることで、リモートコード実行が達成される可能性があります。 ベンダー開示: この脆弱性に関するベンダーの開示情報と修正は、こちら で確認できます。 CVE がない理由? 私もベンダーも、この脆弱性に対して CVE を申請しませんでした。 要件: この脆弱性の悪用には以下が必要です: 有効なユーザー資格情報 概念実証:...

CVE-2024-45436

Ollama CVE-2024-45436 エクスプロイト Ollama ZIP トラバーサル脆弱性 CVE-2024-45436 に対するクリーンで効率的なエクスプロイト実装です。 中国語ドキュメント：READMECN.md 脆弱性の説明 CVE-2024-45436 は、Ollama バージョン 0.1.47 未満におけるパストラバーサル脆弱性（別名「Zip Slip」）です。この脆弱性により、攻撃者は ZIP ファイル展開操作時のパス検証不備を悪用して、ファイルシステム上の任意の場所にファイルを書き込むことができます。 この欠陥は、モデルファイルを展開する Ollama の...

OPENSUSE-SU-2026:21999-1 Security update for rclone

This update for rclone fixes the following issues: Changes in rclone: - Update to version 1.75.1: boo1279548 - Security - archive - Fix zip slip path traversal in untrusted zip files GHSA-66hp-wgxq-6f5q CVE-PENDING Nick Craig-Wood - Hide any archive entry which escapes the directory being listed...

CVE-2023-52076-PoC

CVE-2023-52076-PoC CVE-2023-52076 の概念実証（Proof-of-concept）です。これは、MATE Desktop 環境に影響する Atril/Xreader ドキュメントビューアにおける、重大なパストラバーサルおよび任意ファイル書き込みの脆弱性です。 このスクリプトは、SSH 設定または自動起動（autostart）デスクトップエントリのいずれかを標的とした zip-slip パスを含む細工済み EPUB ペイロードを生成し、標的システム上でのリモートコマンド実行を可能にします。 機能 1. SSH キーインジェクションと autostart RC...

BIT-RCLONE-2026-88014 rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...

GO-2026-6464 rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace in github.com/rclone/rclone

rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace in github.com/rclone/rclone...

CVE-2026-59974 Stanza: Zip Slip Path Traversal in Model/Resource Extraction

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating...

CVE-2026-59974 Stanza: Zip Slip Path Traversal in Model/Resource Extraction

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating...

CVE-2026-59974 Stanza: Zip Slip Path Traversal in Model/Resource Extraction

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating...

CVE-2026-59974

Stanza is a Stanford NLP Python library. Prior to 1.14.0 , the function stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating member paths. The vulnerable extraction path is reachable through stan...

EUVD-2026-80864

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating...

Grafana Plugin Extraction Zip Slip

Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escape the plugin installation directory, writing arbitrary files and an executable backend binary outside that directory...

CVE-2026-90445

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

CVE-2026-90445 Path Traversal in Malcolm

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...