[SECURITY] Fedora 24 Update: libarchive-3.1.2-17.fc24

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

eXtplorer 2.1.9 Path Traversal

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EXTPLORER-ARCHIVE-PATH-TRAVERSAL.txt + ISR: apparitionsec Vendor: ============== extplorer.net Product: ================== eXtplorer v2.1.9 eXtplorer is a PHP and...

Download Wayback Machine Archive: waybackpack

Download Wayback Machine archive for a given URL Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. Waypackback is written in pure Python, depends only on requests , and should work wherever Python works. Should be compatible with both...

The vulnerability of the ESET NOD32 antivirus protection allows a perpetrator to execute arbitrary code.

The vulnerability of the archive support module of the ESET NOD32 antivirus software arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by setting a high value for the language used in the installation fi...

CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

Heap overflow

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

CVE-2016-1541

CVE-2016-1541 affects libarchive and describes a heap-based buffer overflow in the function zip_read_mac_metadata (archive_read_support_format_zip.c) in versions before 3.2.0. A crafted ZIP entry-size can allow an attacker to execute arbitrary code on the affected system. The issue is addressed u...

CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

PHP ZIP Archive Heap Overflow (CVE-2016-3078)

A heap overflow vulnerability exists in PHP, due to an integer overflow when reading ZIP files. A remote attacker can exploit this vulnerability by sending a crafted ZIP archive to a web application running a vulnerable version of PHP. A successful attack can result in remote code execution under...

libarchive -- RCE vulnerability

The libarchive project reports: Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

closermag.fr XSS vulnerability

Vulnerable URL: http://www.closermag.fr/Archive/annee/2013'"/alert"openbugbounty"...

PHP tar/zip/phar parser denial of service vulnerability

PHP is an open source general-purpose computer scripting language. A security vulnerability in PHP's tar/zip/phar parser allows remote attackers to use the vulnerability to construct malicious compressed files that can be tricked into being parsed by the user, crashing the application...

UBUNTU-CVE-2016-4342

ext/phar/pharobject.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted 1 TAR, 2 ZIP, or 3 PHAR archive...

PHP PHAR Extension Denial of Service Vulnerability (CNVD-2016-02701)

PHP is an open source general-purpose computer scripting language. A security vulnerability exists in the PHP PHAR extension that stems from the program's failure to properly handle filenames in archives, allowing remote attackers to exploit the vulnerability by submitting a special request to...

scarlets.co.uk XSS vulnerability

Vulnerable URL: http://www.scarlets.co.uk/eng/games/playerarchive.php?includeref=dynamic=yes=%27%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E===T== Details: Description| Value ---|--- Patched:| Yes, at 13.01.2018 Latest check for patch:| 13.01.2018 15:23 GMT Vulnerability type:| XSS...

PHP extractTo directory traversal vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A directory traversal vulnerability exists in the ZipArchive::extractTo function in PHP versions 5.5 and 5.6, which can be exploited by remote...