148 matches found
miteru
This repository does not have a README...
CVE-2025-0411-PoC
Plus de PoC sur : https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Compilation cpp avec MinGW-w64 x8664-w64-mingw32-g++ loader.cpp -o loader.exe -s -static Après compilation, compressez l'exe avec 7z et exécutez deux fois Étant donné que cette vulnérabilité nécessite une interaction de...
Java-Compressed-file-security
Java-Compressed-file-security Java Web - Vulnérabilité de sécurité des fichiers compressés Environnement de test : root@kitploit: Windows For Apache Tomcat/8.5.16 0x01 Création d'un fichier compressé malveillant avec traversée de répertoire Code : root@kitploit: coding=utf-8 import zipfile import...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating compression context during writeback Bai, Shuangpeng reported a bug as below: Oops: divide error: 0000 1 SMP KASAN PTI CPU: 0 UID: 0 PID: 11441 Comm: syz.0.46 Not tainted 6.17.0 1 PREEMPTfull Hardware...
USN-8733-1: Gzip vulnerabilities
Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utility created temporary files in an insecure manner when mktemp was unavailable. A local attacker could possibly use this issue to overwrite arbitrary files. CVE-2026-41991 Elias Hasas, Michał Majchrowicz and Marcin...
USN-8733-1 gzip vulnerabilities
Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utility created temporary files in an insecure manner when mktemp was unavailable. A local attacker could possibly use this issue to overwrite arbitrary files. CVE-2026-41991 Elias Hasas, Michał Majchrowicz and Marcin...
CVE-2026-62641
A flaw was found in Roundcube Webmail. The TNEF Transport Neutral Encapsulation Format decoder, which handles winmail.dat files, is vulnerable to a denial of service. A remote attacker could send a specially crafted compressed-RTF Rich Text Format file, causing the decoder to consume excessive...
USN-8512-1 gzip vulnerabilities
It was discovered that Gzip's gzexe utility handled temporary files in an insecure manner. When the mktemp utility was not available, gzexe constructed a temporary file path based on the process ID, which could be predicted. A local attacker could possibly use this issue to overwrite arbitrary...
CVE-2026-56138
AIL framework contains a path traversal vulnerability in the /objects/item/diff endpoint. The endpoint accepts item identifiers through the s1 and s2 query parameters and, prior to the fix, attempted to retrieve and compare item contents without first verifying that both referenced items existed ...
CVE-2026-27460 Tandoor Recipes Affected by Denial of Service via Recipe Import
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.5, a critical Denial of Service DoS vulnerability was in the recipe import functionality. This vulnerability allows an authenticated user to crash the server or make a significantly...
PT-2026-31471
Name of the Vulnerable Software and Affected Versions Unfurl versions prior to 2026.04 Description Unfurl contains a flaw in the parse compressed.py component due to unbounded zlib decompression. Remote attackers can leverage this to cause a denial of service. Specifically, attackers can send...
UBUNTU-CVE-2025-68772
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating compression context during writeback Bai, Shuangpeng reported a bug as below: Oops: divide error: 0000 1 SMP KASAN PTI CPU: 0 UID: 0 PID: 11441 Comm: syz.0.46 Not tainted 6.17.0 1 PREEMPTfull Hardware...
CVE-2021-27345
A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service DOS via a crafted compressed file...
CVE-2021-27347
Use after free in lzmadecompressbuf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service DoS via a crafted compressed file...
EUVD-2018-1971
Malware in sbrugna...
EUVD-2007-1278
Malware in sbrugna...
EUVD-2021-14105
Malware in sbrugna...
EUVD-2005-1231
Malware in sbrugna...