Lucene search
+L

45 matches found

NVD
NVD
•added 2026/10/20 4:17 p.m.•10 views

CVE-2026-113609

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the...

4.8CVSS0.0018EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/20 3:40 p.m.•16 views

CVE-2026-113609

Versions of Bandisoft Bandizip prior to 7.47 are vulnerable to a Mark-of-the-Web (MotW) bypass affecting .ps1 and .psm1 files. The application fails to propagate MotW protections to these extracted files, which allows attackers to deliver unsigned PowerShell scripts or modules within downloaded a...

4.8CVSS5.9AI score0.0018EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/20 3:40 p.m.•9 views

CVE-2026-113609 Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the...

4.8CVSS5.9AI score0.0018EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/20 3:40 p.m.•16 views

EUVD-2026-105087

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the...

4.8CVSS5.9AI score0.0018EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/20 3:40 p.m.•22 views

CVE-2026-113609 Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the...

4.8CVSS0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•10 views

PT-2026-118469

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the...

4.8CVSS5.9AI score0.0018EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/10/19 4:00 p.m.•9 views

Bandisoft Bandizip processing logic error vulnerability

Versions of Bandisoft Bandizip prior to 7.47 contain a processing logic vulnerability. This vulnerability arises from the failure to propagate the Mark-of-the-Web to the extracted.ps1 and.psm1 files. As a result, attackers may be able to bypass zone-based execution protection and execute unsigned...

4.8CVSS6.1AI score0.0018EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/22 9:17 p.m.•30 views

CVE-2025-50325

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

5.4CVSS0.00505EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/22 12:00 a.m.•57 views

CVE-2025-50325

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

0.00505EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/22 12:00 a.m.•17 views

CVE-2025-50325

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

5.4AI score0.00505EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/22 12:00 a.m.•25 views

CVE-2025-50325

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

6AI score0.00505EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/22 12:00 a.m.•51 views

CVE-2025-50325

BandiZip v.7.37 is affected by an Authentication Bypass Vulnerability that allows remote attackers to circumvent the Mark-of-the-Web protection mechanism. Mark-of-the-Web is a security feature designed to identify files originating from untrusted or external sources. At this time, no information ...

5.4CVSS6AI score0.00505EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•37 views

PT-2026-63490

Name of the Vulnerable Software and Affected Versions BandiZip version 7.37 Description An authentication bypass issue exists that allows remote attackers to circumvent the Mark-of-the-Web protection mechanism. Mark-of-the-Web is a security feature used by operating systems to identify files that...

5.4CVSS5.9AI score0.00505EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/22 12:00 a.m.•10 views

CVE-2025-50325: Protection Mechanism Failure

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

5.4CVSS5.9AI score0.00505EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/22 12:00 a.m.•28 views

EUVD-2025-210501

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

5.4AI score0.00505EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2014-1754

Malware in sbrugna...

6.9CVSS5.8AI score0.00501EPSS
SaveExploits3References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•58 views

EUVD-2025-14686

Malicious code in bioql PyPI...

7.8CVSS5.8AI score0.00291EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/17 2:19 a.m.•31 views

CVE-2025-33027

In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Bandizip. User interaction is required to exploit this vulnerability in that the target must vis...

7.8CVSS6.7AI score0.00291EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/15 6:15 p.m.•27 views

CVE-2025-33027

In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Bandizip. User interaction is required to exploit this vulnerability in that the target must vis...

7.8CVSS6.7AI score0.00291EPSS
SaveExploits0References2
NVD
NVD
•added 2025/04/15 6:15 p.m.•48 views

CVE-2025-33027

In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Bandizip. User interaction is required to exploit this vulnerability in that the target must vis...

7.8CVSS0.00291EPSS
SaveExploits0References2
Rows per page
Query Builder