CVE-2022-26455

In gz, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07177858; Issue ID: ALPS07177858...

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the gz module of the MediaTek chips, which is caused by memory corruption due to incorrect error handling. This could result in a local privilege escalation that requires...

WordPress plugin WP All Import 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP All...

gz-hird.com Cross Site Scripting vulnerability OBB-1213179

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

DRUPAL-CORE-2019-012

The Drupal project uses the third-party library Archive\Tar, which has released a security improvement that is needed to protect some Drupal configurations. Multiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads and processes them. The late...

CVE-2019-1905

A vulnerability in the GZIP decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of GZIP-formatted files. An attacke...

gz.17zwd.com XSS vulnerability

Open Bug Bounty ID: OBB-566655 Description| Value ---|--- Affected Website:| gz.17zwd.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

BigDump Importer v0.32b remote file upload

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : BigDump Importer v0.32b RFU Date : 05-03-2012 Author : TeaM MosTa Version : ALL Dork :...

CVE-2008-7144

WinRAR prior to 3.71 is affected by multiple unspecified vulnerabilities triggered by crafted archive formats (ACE, ARJ, BZ2, CAB, GZ, LHA, RAR, TAR, ZIP). The exact impact, vectors, and fixes are not detailed in the provided documents.

Buffer-overflow in WinUAE 1.4.4

Luigi Auriemma Application: WinUAE http://www.winuae.net Versions: = 1.4.4 Platforms: Windows Bug: buffer-overflow Exploitation: local Date: 21 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1 Introduction...

CVE-2007-2058

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the file path in an 1 GZ, 2 TAR, 3 RAR, 4 JAR, or 5 ZIP archive...

Directory traversal

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the file path in an 1 GZ, 2 TAR, 3 RAR, 4 JAR, or 5 ZIP archive...

Directory traversal

Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .gz, 2 .jar, 3 .rar, 4 .tar.gz, 5 .zip, or 6 .tar file...

CVE-2006-6960

The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with 1 RAR, 2 GZ, 3 TAR, 4 CAB, or 5 ACE compression...

CVE-2006-6960

The CVE concerns WebRoot Spy Sweeper (Compression Sweep) prior to version 4.5.9 failing to handle non-ZIP archives. Specifically, the feature does not process archives in RAR, GZ, TAR, CAB, or ACE formats, which can allow remote attackers to bypass malware detection. Affected component: Compressi...

CVE-2006-3326

The CVE-2006-3326 entry describes a directory-traversal vulnerability in QuickZip 3.06.3 where remote attacker-controlled dot-dot sequences in filenames inside TAR, GZ, and JAR archives can cause overwriting of arbitrary files or directories. The root cause is improper handling of archive filenam...

Directory traversal

Directory traversal vulnerability in FilZip 3.05 allows remote attackers to write arbitrary files via a .. dot dot in a 1 .rar, 2 .tar, 3 .jar, or 4 .gz file. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

BitZipper Archive Extraction Directory traversal

BitZipper Archive Extraction Directory traversal BitZipper is an advanced data compression tool for Windows that enables you to unzip 18 different compression and encoding formats with superior ease-of-use. Create 8 different types of compressed files http://www.bitzipper.com Credit: The...

CVE-2006-2520

Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a .. dot dot in the filename of a file that is stored in a 1 RAR .rar, 2 TAR .tar, 3 ZIP .zip, 4 GZ .gz, or 5 JAR .jar archive...

CVE-2006-2520

CVE-2006-2520 affects BitZipper (versions up to and including 4.1.2 SR-1). The flaw is a directory traversal in archive handling: a filename within a stored archive (RAR, TAR, ZIP, GZ, JAR) can contain a .. sequence, enabling an attacker to create files in arbitrary directories on the host. This ...