CVE-2024-0406-POC

CVE-2024-0406 Proof of Concept PoC Dieses Repository enthält einen Proof of Concept PoC-Exploit für CVE-2024-0406 , eine Schwachstelle, die auf symlink-basierter Tar-Archivextraktion beruht und Path Traversal oder das Überschreiben von Dateien in betroffenen Systemen ermöglicht. Weitere Details...

codehaus-plexus__plexus-archiver_CVE-2023-37460_4-7-1

Plexus-archiver Il master attuale è ora su https://github.com/codehaus-plexus/plexus-archiver Suggerimento Importante Sulla base di un suggerimento del team di sicurezza di snyk.io, è stato individuato un possibile problema di sicurezza. Inoltre, hanno offerto una patch per prevenire il possibile...

codehaus-plexus__plexus-archiver_CVE-2018-1002200_3-5

should start with the heading "Plexus-archiver" and then badges, then the translated paragraph, then " Note di rilascio", then "Puoi trovare ...", then the bullet list with translated link texts. Make sure no extra translation commentary.Plexus-archiver Il master attuale si trova ora su...

PoC-CVE-2019-10743

Zip Slip डेमो यह प्रोजेक्ट mholt/archiver पैकेज के असुरक्षित संस्करण का उपयोग करके Zip Slip भेद्यता CVE-2019-10743 को प्रदर्शित करता है। Zip Slip क्या है? Zip Slip एक भेद्यता है जिसे Snyk के सुरक्षा शोधकर्ताओं ने खोजा था। यह पाया गया कि यह भेद्यता कई पैकेजों को प्रभावित कर रही है जिनका उपयोग...

CVE-2025-43920

CVE-2025-43920: Iniezione di comandi tramite oggetto dell'email in GNU Mailman 2.1.39 pacchetto cPanel/WHM Scoperto da: Firudin Davudzada & Musazada Aydan Data di divulgazione: Aprile 2025 CVE ID: CVE-2025-43920 Gravità: 5.4 Media CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Tipo di attacco: Remo...

archiver-MOTW-support-comparison

Confronto del supporto alla propagazione di MOTW Mark of the Web nei software di compressione per Windows Inglese | Giapponese Contesto Il 3 marzo 2022, Microsoft ha annunciato che il comportamento predefinito delle applicazioni Office su Windows verrà modificato per bloccare le macro nei file...

RHSA-2023:6886 Red Hat Security Advisory: plexus-archiver security update

Bulletin has no description...

CVE-2026-48536

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Settings SMTP configuration that allows authenticated attackers to inject arbitrary web script or HTML via the SMTP server address parameter to /Archiver/GeneralSettingsWizard.aspx. The injected payload ...

CVE-2026-48537

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiveAssistantWizard.aspx. The injected...

CVE-2026-48539

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...

CVE-2026-48538

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default import settings configuration that allows authenticated attackers to inject arbitrary web script or HTML via the configured folders parameter to /Archiver/ImportSettingsWizard.ashx. The injected payload ...

CVE-2026-48532

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy name parameter to /Archiver/FAARetentionPolicyWizard.aspx. The injected paylo...

CVE-2026-48531

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy name parameter to /Archiver/RetentionPolicyWizard.aspx. The injected payload is stored by...

CVE-2026-48534

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the server URL parameter to /Archiver/ImapServerWizard.aspx. The injected payload is stored by...

CVE-2026-48530

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject arbitrary web script or HTML via the rule name and email criteria parameters to /Archiver/CategorizationPolicyWizard.aspx. The...

CVE-2026-48535

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the proxy server address parameter to /Archiver/CallHomeSettingsWizard.aspx. The injected paylo...

CVE-2026-48539 GFI Archiver < 15.13 Stored XSS via MailInsights.aspx

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...

CVE-2026-48539 GFI Archiver < 15.13 Stored XSS via MailInsights.aspx

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...

CVE-2026-48539

GFI Archiver prior to 15.13 is affected by CVE-2026-48539: a stored XSS in the MailInsights.aspx report naming parameter. An authenticated user can inject script/HTML that is stored by ReportScheduling.btnSaveReport_Click() and later executes in the viewer’s browser when they access the MailInsig...

CVE-2026-48538

GFI Archiver