PT-2025-62961

Summary A Zip Slip vulnerability in PsiTransfer allows an unauthenticated attacker to upload files with path traversal sequences in the filename e.g. ../../../.ssh/authorized keys. When a victim downloads the bucket as a .tar.gz archive and extracts it, malicious files are written outside the...