GHSA-MQ35-X99R-54FC github.com/u-root/u-root/pkg/cpio Arbitrary File Write via Archive Extraction (Zip Slip)

This affects all versions of package github.com/u-root/u-root/pkg/cpio up to and including 7.0.0. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based relative and absolute path traversal attacks in cpio file extraction...

The vulnerability of the GoGoReleaser binary file extraction tool, related to the disclosure of information through registration files, allows a hacker to disclose the protected information.

The vulnerability of the GoGoReleaser binary file collection relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

winDED Custom exploit for CVE-2023-38831 using python. Int...

Denial Of Service (DoS)

mattermost is vulnerable to Denial Of Service attack. The vulnerability is caused due to a lack of validation while performing zip file extraction. An attacker is able to upload a specially crafted zip zip bomb, which upon extraction leads to consumption of excessive resources...

GHSA-897X-XVJ8-42RQ Zip slip in mleap

FileUtil.extract enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory. When creating an instance of TensorflowModel using the savedmodel format and an exported tensorflow model, the apply function invokes th...

CVE-2023-5245 Using MLeap for loading a saved model (zip archive) can lead to path traversal/arbitrary file creation and possibly remote code execution.

FileUtil.extract enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory. When creating an instance of TensorflowModel using the savedmodel format and an exported tensorflow model, the apply function invokes th...

PT-2023-24738 · Easyuse · Easyuse Mailhunter Ultimate

Name of the Vulnerable Software and Affected Versions: EasyUse MailHunter Ultimate versions 2023 and earlier Description: The issue allows remote authenticated users to extract files into arbitrary directories via a crafted ZIP archive. This is due to a path traversal vulnerability in the create...

CVE-2023-26367 Error based file extraction via PHP filter chains during product bulk import logic

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read by an admin-privilege authenticated attacker. Exploitation of this issue do...

CVE-2023-38346

An issue was discovered in Wind River VxWorks 6.9 and 7. The function tarExtract implements TAR file extraction and thereby also processes files within an archive that have relative or absolute file paths. A developer using the "tarExtract" function may expect that the function will strip leading...

PT-2023-31972 · Mleap +1 · Mleap +2

Name of the Vulnerable Software and Affected Versions: MLeap versions prior to 0.17.0 Description: The issue is related to a path traversal flaw, also known as Zip Slip, which allows arbitrary file creation and can lead to code execution. This occurs when the FileUtil.extract function enumerates...

zeek -- potential DoS vulnerabilities

Tim Wojtulewicz of Corelight reports: File extraction limits were not correctly enforced for files containing large amounts of missing bytes. Sessions are sometimes not cleaned up completely within Zeek during shutdown, potentially causing a crash when using the -B dpd flag for debug logging. A...

ROS-20230911-08

Vulnerability of UnRAR file unzipping tool is related to incorrect link resolution before accessing a file "Jump to link". before accessing the file "Follow link". Exploitation of the vulnerability could allow an attacker acting remotely to extract files outside the destination folder using file...

FreeBSD : zeek -- potential DoS vulnerabilities (8eefa87f-31f1-496d-bf8e-2b465b6e4e8a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8eefa87f-31f1-496d-bf8e-2b465b6e4e8a advisory. - Tim Wojtulewicz of Corelight reports: File extraction limits were not correctly enforced for files...

Path Traversal

ZIPFoundation is vulnerable to Path Traversal. The vulnerability is due to the package not validating if symlinks are pointing to paths outside the extraction directory. This allows an attacker to extract files in any arbitrary location and can also lead to code execution...

PT-2023-26800 · Unknown · Zipfoundation

Name of the Vulnerable Software and Affected Versions: ZIPFoundation version 0.9.16 Description: An issue in ZIPFoundation allows attackers to execute a path traversal via extracting a crafted zip file. Recommendations: For ZIPFoundation version 0.9.16, update to a version that fixes this issue, ...

CVE-2023-37646

An issue in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to execute a directory traversal...

CVE-2023-37646

An issue in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to execute a directory traversal...

CVE-2023-37646

CVE-2023-37646 concerns Bitberry File Opener v23.0, where the CAB file extraction function is vulnerable to a directory traversal. The issue arises in the CAB extraction component and is described as allowing local attackers to achieve path traversal with high impact (confidentiality/integrity/av...

CVE-2023-37646

An issue in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to execute a directory traversal...

Bitberry File Opener Path Traversal Vulnerability

Bitberry File Opener is a free file opening tool from Bitberry. The main purpose of this tool is to allow users to easily open, view, and work with a variety of different file types without having to install and run several different applications. A security vulnerability exists in Bitberry File...