Linux Distros Unpatched Vulnerability : CVE-2021-27919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service panic upon attempted use of the Reader.Open API for a ZIP archive in which...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Path Traversal Exploit PoC !PoC Demo...

CVE-2025-45317

A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive...

Malicious code in recipe-archive (npm)

The package recipe-archive was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-24431-scorpio-rising-n2jox-rfxhqe (npm)

The package zip-mp3-a-lbum-do-wnload-new-24431-scorpio-rising-n2jox-rfxhqe was found to contain malicious code...

MAL-2025-41016 Malicious code in zip-mp3-a-lbum-do-wnload-new-vitalogy-1-tz46f-yhygln (npm)

The package zip-mp3-a-lbum-do-wnload-new-vitalogy-1-tz46f-yhygln was found to contain malicious code...

MAL-2025-31903 Malicious code in recipe-archive (npm)

The package recipe-archive was found to contain malicious code...

MAL-2025-41011 Malicious code in zip-mp3-a-lbum-do-wnload-new-70733-life-love-flesh-blood-txrj2-busfbz (npm)

The package zip-mp3-a-lbum-do-wnload-new-70733-life-love-flesh-blood-txrj2-busfbz was found to contain malicious code...

MAL-2025-41004 Malicious code in zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir (npm)

The package zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir was found to contain malicious code...

MAL-2025-41008 Malicious code in zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt (npm)

The package zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt was found to contain malicious code...

MAL-2025-41007 Malicious code in zip-mp3-a-lbum-do-wnload-new-31841-my-melody-4etja-ihiwfy (npm)

The package zip-mp3-a-lbum-do-wnload-new-31841-my-melody-4etja-ihiwfy was found to contain malicious code...

Security update for python3

This update for python3 fixes the following issues: CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705 CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets bsc1247249 Other fixes: - Limit...

EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2025-1958)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involve...

CVE-2011-10016

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

CVE-2025-45317

A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive...

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

Cybersecurity researchers have discovered a new malvertising campaign that's designed to infect victims with a multi-stage malware framework called PS1Bot. "PS1Bot features a modular design, with several modules delivered used to perform a variety of malicious activities on infected systems,...

Security update for python3

This update for python3 fixes the following issues: CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets bsc1247249. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

CVE-2025-8747

A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model archive...

CVE-2025-45317

The hortusfox-web plant manager system (version v4.4 ) is susceptible to a zip slip vulnerability within the /modules/ImportModule.php component. This flaw arises from the improper handling of compressed files, enabling an attacker to achieve arbitrary code execution by providing a crafted archiv...