cve-2023-38831

CVE-2023-38831 Vulnerável: WinRAR = 6.22 https://www.win-rar.com/ Uso: root@kitploit: python3 cve-2023-38831.py filename payloadname archivename Referências: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ https://xakep.ru/2023/08/24/winrar-0day/ Telegram: https://t.me/ptsoft...

cve-2023-38831

Introduzione al Progetto Questo è uno strumento scritto in Go per generare POC per la vulnerabilità CVE-2023-38831. Versione interessata: WinRAR 6.23 Come usare? Compilazione root@kitploit: go build cve-2023-38831.go Utilizzo root@kitploit: cve-2023-38831.exe 1234.jpg payload.cmd poc.zip Dove...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the sanitizeArchivePath function. An attacker can overwrite arbitrary files, such as shell configuration files, SSH keys, kubeconfig, or crontabs, by supplying crafted archive entries that exploit improper path...

From HealthKick to GOVERSHELL: The Evolution of UTA0388's Espionage Malware

A China-aligned threat actor codenamed UTA0388 has been attributed to a series of spear-phishing campaigns targeting North America, Asia, and Europe that are designed to deliver a Go-based implant known as GOVERSHELL. "The initially observed campaigns were tailored to the targets, and the message...

Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads

Cybersecurity researchers have flagged a new phishing campaign that's using fake voicemails and purchase orders to deliver a malware loader called UpCrypter. The campaign leverages "carefully crafted emails to deliver malicious URLs linked to convincing phishing pages," Fortinet FortiGuard Labs...

CVE-2025-54368 uv is vulnerable to ZIP payload obfuscation through parsing differentials

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...

13,000 MikroTik Routers Hijacked by Botnet for Malspam and Cyberattacks

A global network of about 13,000 hijacked Mikrotik routers has been employed as a botnet to propagate malware via spam campaigns, the latest addition to a list of botnets powered by MikroTik devices. The activity "takes advantage of misconfigured DNS records to pass email protection techniques,"...