Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/04/17 2:19 a.m.•26 views

CVE-2025-33027

In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Bandizip. User interaction is required to exploit this vulnerability in that the target must vis...

7.8CVSS7.1AI score0.00286EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/15 6:15 p.m.•43 views

CVE-2025-33027

In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Bandizip. User interaction is required to exploit this vulnerability in that the target must vis...

7.8CVSS0.00286EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/15 12:00 a.m.•118 views

CVE-2025-33027

CVE-2025-33027 concerns Bandizip up to version 7.37 where a Mark-of-the-Web bypass exists in the handling of archived files. When extracting crafted archives bearing MoW, Bandizip fails to propagate the marker to extracted files, potentially allowing arbitrary code execution in the current user c...

7.8CVSS6.8AI score0.00286EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/15 12:00 a.m.•9 views

CVE-2025-33027

In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Bandizip. User interaction is required to exploit this vulnerability in that the target must vis...

6.1CVSS6.8AI score0.00286EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•18 views

PT-2025-16366

Name of the Vulnerable Software and Affected Versions Bandizip versions 7.37 and earlier Description A Mark-of-the-Web Bypass Vulnerability exists in Bandizip, allowing attackers to bypass the Mark-of-the-Web protection mechanism on affected installations. User interaction is required to exploit...

7.8CVSS6.7AI score0.00286EPSS
SaveExploits0References11
Rows per page
Query Builder