Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via a specially crafted wxapkg file. An attacker can cause resource consumption by sending specially crafted zip files that exploit the decompression process and convincing ...

KillWxapkg 安全漏洞

KillWxapkg is an automated decompiler of WeChat applets by Antkites individual developers. A security vulnerability exists in KillWxapkg 2.4.1 and earlier versions, which stems from an os command injection in the processFile function in the internal/unpack/unpack.go file...

CVE-2025-5030: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated...