Lucene search
+L

3 matches found

OSV
OSV
added 2021/05/18 3:31 p.m.35 views

GHSA-H74J-692G-48MQ Path Traversal in MHolt Archiver

All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated to the target extraction directory, whi...

5.5CVSS6.3AI score0.06552EPSS
SaveExploits1References7
OSV
OSV
added 2019/01/05 6:30 p.m.10 views

MGASA-2019-0005 Updated plexus-archiver packages fix security vulnerability

A path traversal vulnerability has been discovered in plexus-archiver when extracting a carefully crafted zip file which holds path traversal file names. A remote attacker could use this vulnerability to write files outside the target directory and overwrite existing files with malicious code or...

5.5CVSS5.4AI score0.13179EPSS
SaveExploits1References3
securityvulns
securityvulns
added 2006/04/04 12:00 a.m.62 views

[Full-disclosure] Barracuda LHA archiver security bug leads to remote compromise

Topic: Barracuda LHA archiver security bug leads to remote compromise Announced: 2006-04-03 Product: Barracuda Spam Firewall Vendor: http://www.barracudanetworks.com/ Impact: Remote shell access Affected product: Barracuda with firmware 3.3.03.022 AND spamdef 3.0.10045 Credits: Jean-Sebastien...

10CVSS6.5AI score0.10262EPSS
SaveExploits3
Rows per page
Query Builder