CVE-2024-27876

CVE-2024-27876 libAppleArchive exploit maker, read the writeup here https://snoolie.gay/blog/CVE-2024-27876...

CVE-2023-38831-WinRAR-Vulnerability-Analysis

CVE-2023-38831-WinRAR-Vulnerability-Analysis This project is a cybersecurity research and analysis project focused on CVE-2023-38831, a critical WinRAR vulnerability that allows attackers to execute malicious code through specially crafted archive files. The project was conducted in a controlled...

SideCopy-Exploits-CVE-2023-38831

SideCopy Exploits CVE-2023-38831 CVE-2023-38831 is a Remote Code Execution RCE vulnerability in WinRAR that impacts WinRAR versions prior to 6.23. Here's how an attacker can exploit it: the malicious archive file contains both a benign file and a folder with the same name as the file. Typically,...

CVE-2026-108168

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DLX Plugins Custom Query Blocks post-type-archive-mapping allows Stored XSS.This issue affects Custom Query Blocks: from n/a through 5.6.0...

EUVD-2026-97295

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DLX Plugins Custom Query Blocks post-type-archive-mapping allows Stored XSS.This issue affects Custom Query Blocks: from n/a through 5.6.0...

CVE-2026-108168

The Custom Query Blocks plugin for WordPress (versions ≤ 5.6.0 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The flaw is caused by Improper Neutralization of Input During Web Page Generation within the post-type-archive-mapping component. This allows an attacker to execute malicio...

CVE-2026-108168 WordPress Custom Query Blocks plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DLX Plugins Custom Query Blocks post-type-archive-mapping allows Stored XSS.This issue affects Custom Query Blocks: from n/a through 5.6.0...

Security Bulletin: Security Vulnerability identified in IBM TRIRIGA - Zip Slip

Summary Security Vulnerability in IBM TRIRIGA - Zip Slip Path Traversal Vulnerability Details CVEID:CVE-2026-102627 DESCRIPTION: IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction. CWE:CWE-22: Improp...

CVE-2018-16370

CVE-2018-16370 In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.More details see https://github.com/lazyphp/PESCMS-TEAM/issues/2...

CVE-2023-38831

CVE-2023-38831 winrar exploit 6.22 = Quick poc git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc example usage python3 simplefile.txt script.bat output.zip...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ CRITICAL VULNERABILITY - Active Exploitation Confirmed CVE-2025-6218 is a critical path traversal vulnerability in WinRAR that allows arbitrary code execution. Currently exploited by APT groups such as GOFFEE, Bitter APT-C-08 and Gamaredon. 📋 Index...

EulerOS 2.0 SP11 : cpio (EulerOS-SA-2026-4310)

According to the versions of the cpio packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio...

EulerOS 2.0 SP11 : perl-Archive-Tar (EulerOS-SA-2026-4358)

According to the versions of the perl-Archive-Tar packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory...

EulerOS 2.0 SP13 : docker-engine (EulerOS-SA-2026-4132)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine...

EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2026-4314)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...

EulerOS 2.0 SP13 : docker-engine (EulerOS-SA-2026-4041)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine...

EulerOS 2.0 SP11 : perl-Archive-Tar (EulerOS-SA-2026-4268)

According to the versions of the perl-Archive-Tar packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory...

CVE-2023-38831

CVE-2023-38831 - RARLAB WinRAR Code Execution Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author b1tg and Group-IB Threat Intelligence Description RARLabs WinRAR before 6.23 allows attackers to execute...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory, the bait file i...

CVE-2023-38831_Exploit

CVE-2023-38831 Exploit Proof-of-Concept Overview This repository contains a Python script that demonstrates a proof-of-concept PoC exploit for CVE-2023-38831. This exploit leverages a vulnerability in specific file-processing mechanisms to execute a reverse shell payload through a malicious RAR...