winrar-exploit

Description Ceci est mon implémentation de l'exploit Winrar CVE-2025-8088. Il utilise les flux de données alternatifs ADS et le patching de chemin dans l'archive. Lorsqu'une victime extrait l'archive infectée, la charge utile ADS patchée par exemple, exécutable, script powershell, ou un png rigol...

CVE-2025-8088-Exploit

CVE-2025-8088 WinRAR Exploit 🔓 Uma prova de conceito para a vulnerabilidade do WinRAR CVE-2025-8088 que afeta as versões 7.12 e anteriores. Esta ferramenta cria um arquivo RAR malicioso que incorpora payloads em Alternate Data Streams ADS com path traversal, potencialmente levando à execução...

CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-

CVE-2025-8088 WinRAR Proof of Concept PoC-Exploit Questo repository contiene uno script Proof of Concept PoC per CVE-2025-8088 , una vulnerabilità di path traversal in WinRAR fino alla versione 7.12. Questo PoC dimostra come un attaccante potrebbe sfruttare la vulnerabilità per collocare file...

CVE-2025-8088-BUILDER-Winrar-Tool

CVE-2025-8088 WinRAR पथ ट्रैवर्सल टूल ⚠ यह उपकरण केवल शैक्षिक उपयोग के लिए बनाया गया है। नियंत्रित वातावरण के बाहर अनधिकृत उपयोग सख्त वर्जित है। एक Python स्क्रिप्ट जो CVE-2025-8088, WinRAR में एक पथ ट्रैवर्सल कमजोरी का शोषण करती है, एक दुर्भावनापूर्ण संग्रह उत्पन्न करके जो निष्पादन योग्य पेलोड क...

CVE-2025-8088-WinRAR-PathTraversal-PoC

CVE-2025-8088 WinRAR Path Traversal Exploit PoC Ein Proof-of-Concept-Exploit, das die WinRAR-Pfad-Traversal-Schwachstelle CVE-2025-8088 für Versionen ≤ 7.12 demonstriert. Details zur Sicherheitslücke CVE-ID : CVE-2025-8088 CVSS-Score : 8.4 Hoch Betroffene Versionen : WinRAR ≤ 7.12 Patch-Version :...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ केवल शैक्षिक और अनुसंधान उद्देश्यों के लिए ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 विषय सूची अवलोकन विशेषताएँ आवश्यकताएँ इंस्टालेशन उपयोग तकनीकी विवरण स्क्रीनशॉट अस्वीकरण योगदान 🎯 अवलोकन CVE-2025-8088 एक काल्पनिक कमज़ोरी प्रदर्शन उपकरण है जो RAR...

CVE-2025-8088-Multi-Document

Exploit di Path Traversal in WinRAR CVE-2025-8088 - Distribuzione Payload Multi-Profondità Questo script Python sfrutta una vulnerabilità di path traversal CVE-2025-8088 in WinRAR per distribuire payload nella cartella di avvio di Windows utilizzando più profondità di percorso relative. L'exploit...

WinRAR-CVE-2025-8088-Path-Traversal-PoC

PoC per CVE-2025-8088: Path Traversal in WinRAR Descrizione della vulnerabilità ☢️ CVE-2025-8088 CVSS 8.4 è una vulnerabilità di path traversal in WinRAR ≤7.12 che consente di posizionare file al di fuori della directory di estrazione tramite flussi di dati alternativi ADS in un archivio RAR. Vien...

best-CVE-2025-8088

CVE-2025-8088 Exploit do WinRAR 🔓 Um exploit de prova de conceito para a vulnerabilidade do WinRAR CVE-2025-8088 que afeta as versões 7.12 e anteriores. Esta ferramenta cria um arquivo RAR malicioso que incorpora payloads em Alternate Data Streams ADS com path traversal, potencialmente levando à...

EUVD-2026-62506

Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., and x.lua . An unauthenticated client can append one of thes...

CVE-2026-52792

Algernon (a pure-Go web server) prior to 1.17.9 is vulnerable to server-side script source disclosure on Windows via NTFS filename aliasing. The root cause is in engine/handlers.go: filepath.Ext() does not recognize NTFS-equivalent suffixes (::$DATA, trailing dot, trailing space) as the script ex...

CVE-2026-54200

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user....

CVE-2026-54200

The CVE-2026-54200 entry concerns Tobit Laboratories AG TeamDavid’s Webbox. It describes a local file inclusion vulnerability in the “send email, fax, SMS, etc.” function accessible via the form field scjob where an the command like @@attach can attach files to a message, enabling an authenticate...

CVE-2026-54200 TeamDavid: Local File Inclusion via the form field 'scjob'

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user....

CVE-2026-64391

A flaw was found in ksmbd, the in-kernel Server Message Block SMB daemon. This vulnerability allows a remote attacker to bypass security restrictions by incorrectly handling credentials for Alternate Data Streams ADS input/output I/O operations. Instead of using the credentials established when t...

SUSE CVE-2026-64391

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the...

CVE-2026-64391

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the...

UBUNTU-CVE-2026-64391

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the...

CVE-2026-64391

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the...