CVE-2025-8088-Multi-Document

Exploit de Path Traversal en WinRAR CVE-2025-8088 - Despliegue de Payload Multi-Profundidad Este script de Python explota una vulnerabilidad de path traversal CVE-2025-8088 en WinRAR para desplegar payloads en la carpeta de inicio de Windows utilizando múltiples profundidades de ruta relativa. El...

CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-

CVE-2025-8088 WinRAR Prueba de Concepto PoC-Exploit Este repositorio contiene un script de Prueba de Concepto PoC para CVE-2025-8088 , una vulnerabilidad de path traversal en versiones de WinRAR hasta la 7.12. Este PoC demuestra cómo los atacantes podrían explotar la vulnerabilidad para colocar...

CVE-2025-8088-BUILDER-Winrar-Tool

CVE-2025-8088 Herramienta de path traversal para WinRAR ⚠ Esta herramienta se crea únicamente con fines educativos. El uso no autorizado fuera de entornos controlados está estrictamente prohibido. Un script de Python que explota CVE-2025-8088, una vulnerabilidad de path traversal en WinRAR,...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ SOLO CON FINES EDUCATIVOS Y DE INVESTIGACIÓN ⚠️ 🌐 Idioma / Dil 🇪🇸 Español 🇹🇷 Türkçe Español 📋 Tabla de contenidos Descripción general Características Requisitos Instalación Uso Detalles técnicos Capturas de pantalla Aviso legal Contribuciones 🎯 Descripción...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

best-CVE-2025-8088

CVE-2025-8088 Exploit de WinRAR 🔓 Un exploit de prueba de concepto para la vulnerabilidad de WinRAR CVE-2025-8088 que afecta a las versiones 7.12 y anteriores. Esta herramienta crea un archivo RAR malicioso que incrusta cargas útiles en flujos de datos alternativos ADS con path traversal, lo que...

WinRAR-CVE-2025-8088-Path-Traversal-PoC

PoC para CVE-2025-8088: Path Traversal en WinRAR Descripción de la Vulnerabilidad ☢️ CVE-2025-8088 CVSS 8.4 es una vulnerabilidad de path traversal en WinRAR ≤7.12 que permite colocar archivos fuera del directorio de descompresión a través de flujos de datos alternativos ADS en un archivo RAR. Se...

CVE-2025-8088-WinRAR-PathTraversal-PoC

CVE-2025-8088 Exploit de Path Traversal en WinRAR PoC Un exploit de prueba de concepto que demuestra la vulnerabilidad de path traversal en WinRAR CVE-2025-8088 que afecta a versiones ≤ 7.12. Detalles de la Vulnerabilidad CVE ID : CVE-2025-8088 Puntuación CVSS : 8.4 Alta Versiones Afectadas :...

CVE-2025-8088-Exploit

CVE-2025-8088 Exploit de WinRAR 🔓 Un exploit de prueba de concepto para la vulnerabilidad de WinRAR CVE-2025-8088 que afecta a las versiones 7.12 y anteriores. Esta herramienta crea un archivo RAR malicioso que incrusta cargas útiles en flujos de datos alternativos ADS con path traversal, lo que...

winrar-exploit

Descripción Esta es mi implementación del exploit CVE-2025-8088 de Winrar. Utiliza flujos de datos alternativos ADS y parcheo de rutas dentro del archivo. Cuando una víctima extrae el archivo infectado, la carga útil ADS parcheada por ejemplo, un ejecutable, un script de PowerShell o algún png...

winrar-exploit

Descrizione Questa è la mia implementazione dell'exploit CVE-2025-8088 per Winrar. Utilizza Alternate Data Streams ADS e il path patching all'interno dell'archivio. Quando una vittima estrae l'archivio infetto, il payload ADS patchato ad es., eseguibile, script powershell o qualche png divertente...

Astra Linux – Vulnerability in libgit2

A issue was discovered in libgit2 before versions 0.28.4 and 0.9x before version 0.99.0. path.c improperly handles equivalent filenames that exist due to NTFS Alternate Data Streams. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1352...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba, specifically in the vfsstreamsxattr module. In this module, uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content, which may include sensitive data, resulting in an information...

EUVD-2026-62506

Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., and x.lua . An unauthenticated client can append one of thes...

CVE-2026-52792

Algernon (a pure-Go web server) prior to 1.17.9 is vulnerable to server-side script source disclosure on Windows via NTFS filename aliasing. The root cause is in engine/handlers.go: filepath.Ext() does not recognize NTFS-equivalent suffixes (::$DATA, trailing dot, trailing space) as the script ex...

CVE-2026-54200

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user....

CVE-2026-54200 TeamDavid: Local File Inclusion via the form field 'scjob'

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user....

CVE-2026-54200

The CVE-2026-54200 entry concerns Tobit Laboratories AG TeamDavid’s Webbox. It describes a local file inclusion vulnerability in the “send email, fax, SMS, etc.” function accessible via the form field scjob where an the command like @@attach can attach files to a message, enabling an authenticate...

CVE-2026-64391

A flaw was found in ksmbd, the in-kernel Server Message Block SMB daemon. This vulnerability allows a remote attacker to bypass security restrictions by incorrectly handling credentials for Alternate Data Streams ADS input/output I/O operations. Instead of using the credentials established when t...

SUSE CVE-2026-64391

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the...