Hardcoded credentials

Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location...

CVE-2018-18913

Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location...

[SECURITY] Fedora 29 Update: libzip-1.5.2-1.fc29

libzip is a C library for reading, creating, and modifying zip archives. Fi les can be added from data buffers, files, or compressed data copied directly f rom other zip archives. Changes made without closing the archive can be reverte d. The API is documented by man pages...

CVE-2018-18913

Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location...

WinRAR 5.61 - Path Traversal Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python3 import os import re import zlib import binascii The archive filename you want rarfilename = "test.rar" The evil file you want to run evilfilename = "calc.exe" The decompression path you want, such shown below...

EulerOS Virtualization 2.5.2 : perl (EulerOS-SA-2019-1078)

According to the version of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and...

The vulnerability of the _bfd_archive_64-bit_slurp_armap function in the GNU Binutils development tool allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bfdarchive64bitslurparmap function archive64.c in the GNU Binutils development tool is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2019-9675

An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phartarwriteheadersint in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue...

The vulnerability of the archive_read_format_iso9660_read_header function in the libarchive library allows a hacker to gain unauthorized access to information.

The vulnerability of the archivereadformatiso9660readheader function in the archivereadsupportformatiso9660.c library of the libarchive library is related to reading beyond the allowed boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to informati...

The vulnerability of the the_read_datanone function in the libarchive library allows a hacker to gain unauthorized access to information.

The vulnerability of the thereaddatanone function in the libarchive library is related to reading data beyond the allowed boundaries during data extraction. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information through a specially created lha archive...

The vulnerability of the WinRAR file archiver lies in the fact that it writes beyond the buffer boundaries during file extraction, allowing an attacker to execute arbitrary code.

The vulnerability of the unacev2.dll file archiver in WinRAR is related to writing beyond the buffer boundaries in memory during file extraction. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted ACE or RAR archive...

The vulnerability of the unacev2.dll library of the WinRAR file compressor allows a hacker to place malicious files anywhere on the disk.

The vulnerability of the unacev2.dll file archiver in WinRAR is related to errors in processing the file name field the relative path is converted to an absolute path. Exploiting this vulnerability allows a remote attacker to place malicious files anywhere on the disk using a specially crafted AC...

CVE-2019-9195

util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive...

Directory traversal

util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive...

CVE-2019-9195

util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive...

CVE-2019-9195

Grin (MimbleWimble implementation) before 1.0.2 contains a ZIP handling flaw in util/src/zip.rs that mishandles suspicious files, enabling an attacker to execute arbitrary code via directory traversal in a ZIP archive. Affected: Grin versions prior to 1.0.2. CVE-2019-9195. Impact: high (NVD CVSS2...

Pluck Arbitrary Code Execution Vulnerability

Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck version 4.7.9-dev1. The vulnerability can be exploited to execute arbitrary code by uploading a ZIP archive file with the action=installmodule URL...

Code injection

An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a ZIP archive, which is then extracted and executed...

Exploit for Path Traversal in Rarlab Winrar

CVE-2018-20250-3 010 Editor template for ACE archive forma...

WinRAR 5.61 - Path Traversal

WinRAR 5.61 - Path Traversal !/usr/bin/env python3 import os import re import zlib import binascii The archive filename you want rarfilename = "test.rar" The evil file you want to run evilfilename = "calc.exe" The decompression path you want, such shown below targetfilename =...