CVE-2021-40444_CAB_archives

CVE-2021-40444CABarchives CVE-2021-40444 - Modelli CAB personalizzati da MakeCAB Riferimento ddl https://github.com/Udyz/CVE-2021-40444-CAB/blob/main/calc.dll...

SteganographierGUI

SteganographierGUI Esconda arquivos em arquivos MP4/MKV Por favor, garanta que você entende o significado de "extensão de arquivo " antes de assistir ao tutorial a seguir. Se não entender, pesquise primeiro "como alterar a extensão de arquivo" Se depois de alterar a extensão o arquivo ainda for...

CVE-2018-20250

exp per Estrarre l'esecuzione di codice da Winrar PoC di Ridter Come usare? Ti basta installare Python 3.7, preparare un file malevolo che vuoi eseguire, impostare i valori desiderati, questo script exp genererà automaticamente il file archivio malevolo! 1. Imposta i valori che desideri...

wargame-tarpioka

BubbleTea CVE-2007-4559 Vulnerabilità di directory traversal tramite “.tar” per accedere a ../../flag percorso root@kitploit: BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Istruzioni di build correnti verifica docker docker ps...

synodecrypt

SynoDecrypt Uno strumento per decrittare tutti gli archivi crittografati Synology SPK, PAT, .... Il lavoro di reverse engineering è spiegato nel nostro post sul blog. Installazione root@kitploit: pip install -r requirements.txt Utilizzo Per prima cosa devi estrarre le chiavi di crittografia e...

winrar_CVE-2023-38831_lazy_poc

winrarCVE-2023-38831lazypoc Faule Methode zum Erstellen einer WinRAR-Datei für CVE-2023-38831 zum Testen Artikel, der diese Schwachstelle und das Beispiel erwähnt: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ Die von mir verwendete WinRAR-Version ist WinRAR 5.91.0 Ich habe eine...

Fix-CVE-2021-44228

CVE-2021-44228! Das aktuelle Programm entfernt die Klasse "org/apache/logging/log4j/core/lookup/JndiLookup.class" aus Ihrem Zip-, Jar-, War-, Ear-Archiv. Vor der Verwendung Befolgen Sie die Anleitung unter https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide/ vor der Verwendung. Das...

CVE-2024-27876

CVE-2024-27876 creatore di exploit per libAppleArchive, leggi il writeup qui https://snoolie.gay/blog/CVE-2024-27876...

OpenSTAManager-RCE-Exploit-CVE-2026-38751

OpenSTAManager RCE Exploit CVE-2026-38751 Beliebiger Datei-Upload, der zu Remote-Codeausführung führt Vollständiger Proof-of-Concept für CVE-2026-38751 , geschrieben in Rust. Warnung: Dieses Tool ist ausschließlich für autorisierte Sicherheitstests und zu Bildungszwecken bestimmt. Verwenden Sie e...

CVE-2023-38831

CVE-2023-38831 Questo è uno strumento facile da usare che crea un exploit per CVE-2023-38831 che colpisce tutte le versioni di WinRAR precedenti alla 6.23. Ulteriori informazioni sull'exploit CVE-2023-38831 RARLAB WinRAR precedente alla 6.23 consente agli attaccanti di eseguire codice arbitrario...

CVE-2025-24071

CVE-2025-24071 - Perdita di hash NTLM di Windows File Explorer 📋 Panoramica CVE-2025-24071 è una vulnerabilità in Windows File Explorer che consente la divulgazione non autorizzata di hash NTLM. Quando un utente estrae un archivio .zip appositamente predisposto contenente un file .library-ms...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093171 advisory. GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: file-roller (UTSA-2026-030639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-030639 advisory. fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093157 advisory. GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. Tenable has extracted the preceding description block...

WordPress All-in-One WP Migration and Backup plugin <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution vulnerability

Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution vulnerability discovered by Jack Taylor in WordPress Plugin All-in-One WP Migration versions = 7.109...

CVE-2026-79775

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

cve-2022-36804

CVE-2022-36804 Bitbucket PoC Questo repository contiene uno script di exploit in Python per la vulnerabilità CVE-2022-36804 di Atlassian Bitbucket Server/Data Center. Il problema è una falla di command injection nel flusso dell'archivio Git, in cui parametri prefix appositamente costruiti possono...

CVE-2026-79775 rclone Archive Backend SquashFS Parser Denial of Service

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

CVE-2026-57863

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequences to the unzip endpoint. Attackers can exploit...

CVE-2026-57863 Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequences to the unzip endpoint. Attackers can exploit...