EUVD-2026-110398

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

EUVD-2026-110220

This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution...

EUVD-2026-110249

The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

Fix-CVE-2021-44228

CVE-2021-44228! The current program remove the class "org/apache/logging/log4j/core/lookup/JndiLookup.class" from your zip, jar, war, ear archive. Before use Follow the guide https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide/ before using. The utility will help your to apply "Modif...

CVE-2025-24071

CVE-2025-24071 - Windows File Explorer NTLM Hash Leak 📋 Overview CVE-2025-24071 is a vulnerability in Windows File Explorer that allows unauthorized disclosure of NTLM hashes. When a user extracts a specially crafted .zip archive containing a malicious .library-ms file, Windows Explorer...

CVE-2018-16370

CVE-2018-16370 In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.More details see https://github.com/lazyphp/PESCMS-TEAM/issues/2...

electronegativity

Electronegativity ⚠️ This project has been archived ⚠️ Use ElectroNG instead! What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations,...

CVE-2026-84610

A file quarantine bypass exists in certain macOS versions, where a maliciously crafted ZIP archive can bypass Gatekeeper checks . This vulnerability was addressed by implementing additional checks. The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No spe...

CVE-2026-112672

A vulnerability in macOS allows a maliciously crafted ZIP archive to bypass Gatekeeper checks. The issue was addressed with improved checks. The fix is available in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No specific exploit information or exploit links are provid...

CVE-2026-113947

This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution...

CVE-2026-113947

In macOS Golden Gate versions prior to 27.2, a vulnerability exists where unpacking a maliciously crafted archive can lead to unexpected app termination or arbitrary code execution . The issue was addressed by implementing improved access restrictions . The vulnerability is fixed in version 27.2 ...

Tarmageddon-CVE-2025-62518-

Tarmageddon CVE-2025-62518 Video: https://youtu.be/EYBB4BHsp9E Repo directories vulnerable-extract minimal repoducible example, takes a path as arg, and extracts that file to ./output malicious-payload creates a simple malicious.tar archive with some example of smuggled content, comments explain...

urx

Extracts URLs from OSINT Archives for Security Insights. Urx collects URLs for a domain from OSINT archives such as the Wayback Machine and Common Crawl. It queries every source in parallel, then filters, tests and formats the results for security work. Features Keyless sources: Wayback Machine,...

SideCopy-Exploits-CVE-2023-38831

SideCopy Exploits CVE-2023-38831 CVE-2023-38831 is a Remote Code Execution RCE vulnerability in WinRAR that impacts WinRAR versions prior to 6.23. Here's how an attacker can exploit it: the malicious archive file contains both a benign file and a folder with the same name as the file. Typically,...

Exploits

Windows Exploits A curated archive of complied and tested public Windows exploits...

cve-2022-41352

cve-2022-41352 generate poc.tar $ chmod +x cpiopocgen.py $ ./cpiopocgen.py show the middle finger to cpio $ cd /tmp $ mkdir -p poc/a/b copy poc.tar to /tmp/poc/a/b/ $ cd /tmp/poc/a/b/ $ cpio -i poc.tar $ ls -al ../ total 16 drwxrwxr-x 3 xabino xabino 4096 ott 10 14:56 . drwxrwxr-x 3 xabino xabino...

german-owasp-day

german-owasp-day German OWASP Day conference site & presentation archive You can find the page at god.owasp.de Please create a folder for each year and then point the redirect from the main index to that folder...

6cy

sixcy — .6cy Container Format A Rust implementation of the .6cy archive format featuring: Self-describing blocks : Every block carries its own magic, version, codec UUID, sizes, and integrity checksums Mandatory integrity verification : CRC32 header checks + BLAKE3 content hashes on every block...

apxutil

A tool to manipulate Schneider Electric PLC archive files This tool can extract and reassemble PLC "archive" files, used by several Schneider Electric PLC:s, including at least M580, M340 and Quantum. The archive files with an extension of .sta are really a zip archive containing a few files...

cve-2023-38831

Project Introduction This is a tool written in Go for generating POC for the CVE-2023-38831 vulnerability Affected version: WinRAR 6.23 How to use? Compile go build cve-2023-38831.go Usage cve-2023-38831.exe 1234.jpg payload.cmd poc.zip Here, 1234.jpg can be the result of any file modification. I...