SideCopy-Exploits-CVE-2023-38831

SideCopy が CVE-2023-38831 を悪用 CVE-2023-38831 は WinRAR のリモートコード実行 RCE 脆弱性であり、WinRAR バージョン 6.23 より前のバージョンに影響します。攻撃者は次のように悪用します。悪意のあるアーカイブファイルには、良性のファイルと、そのファイルと同じ名前のフォルダが含まれています。通常、このフォルダにはマルウェアが含まれており、被害者が一見無害なファイルを開こうとすると実行されます。 この RAR ファイルの例では、良性の PDF ファイルがあり、フォルダ内にはマルウェアを含む実行可能ファイルがあります。 被害者が...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

CVE-2023-38831_Exploit

CVE-2023-38831 エクスプロイトの概念実証 概要 このリポジトリには、CVE-2023-38831 の概念実証（PoC）エクスプロイトを実演するPythonスクリプトが含まれています。このエクスプロイトは、特定のファイル処理メカニズムの脆弱性を悪用して、悪意のあるRARファイルを介してリバースシェルペイロードを実行します。 免責事項: このプロジェクトは、教育目的および倫理的なセキュリティ研究のみを目的としています。事前の同意なしにこのコードを使用してシステムやネットワークを侵害することは、違法かつ非倫理的です。作者は誤用に関する一切の責任を負いません。 仕組み...

Tarmageddon-CVE-2025-62518-

Tarmageddon CVE-2025-62518 Video: https://youtu.be/EYBB4BHsp9E リポジトリのディレクトリ vulnerable-extract 最小限の再現可能な例、引数としてパスを受け取り、そのファイルを ./output に抽出します malicious-payload 簡単な malicious.tar アーカイブを作成し、密輸されたコンテンツの例を示します。コメントでステップごと、ブロックごとの動作を説明しています 再現方法 提供されている 再現スクリプト を使用するか、手動で行います malicious-payload...

CVE-2026-55569

aqua (aquaproj/aqua), a declarative command-line version manager written in Go, contains a symlink traversal flaw in pkg/unarchive/archives.go (HandleFile). The handler calls os.Symlink with an unvalidated LinkTarget and does not jail the target to the extraction destination. A subsequent regular...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit root@kitploit: | || | \ / / | / | | | | Erweitertes WinRAR-Pfad-Traversal-Exploit-Tool Ein raffiniertes GUI-Tool zum Erstellen bösartiger RAR-Archive, die die WinRAR-Pfad-Traversal-Schwachstelle CVE-2025-8088 mithilfe von ADS- und RAR5-Header-Manipulation ausnutzen...

CVE-2018-20250

exp per Estrarre l'esecuzione di codice da Winrar poc di Ridter come si usa? ti basta installare python 3.7, preparare un file dannoso che vuoi eseguire, impostare i valori che vuoi, questo script exp genererà automaticamente il file di archivio malevolo! 1. imposta i valori che vuoi root@kitploi...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

CVE-2026-24330

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

CVE-2026-24330

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

CVE-2026-24330 Wildfly-core: wildfly: arbitrary file read via malicious archive deployment

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

CVE-2026-24330

Affected product: wildfly-core. A vulnerability allows a remote attacker, authenticated as a deployer, to import and deploy a malicious archive from an untrusted source by abusing WildFly libraries to craft a Java project and issue an HTTP POST to upload/deploy. This can lead to further exploitat...

EUVD-2026-55930

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

PT-2026-70055

Name of the Vulnerable Software and Affected Versions wildfly-core affected versions not specified Description A flaw allows a remote attacker with 'deployer' account authentication to import and deploy a malicious archive file from an untrusted source. By leveraging WildFly libraries to create a...

golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A ...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

Uncontrolled Resource Consumption

github.com/aquasecurity/trivy is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to the custom tar unpacker reading Helm chart archive .tgz entries using io.ReadAll without enforcing a size limit, which allows an attacker to supply a malicious compressed archive that...

CVE-2026-53655

A flaw was found in node-tar. This vulnerability arises because node-tar incorrectly applies PAX extended header size records to subsequent intermediary metadata headers, leading to a desynchronization of the tar stream cursor compared to other standard tar implementations. A remote attacker coul...

CVE-2026-57516 Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader

Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the readwebdataset function. The defaultdecoder function in webdatasetdatasource.py unconditionally calls...

PT-2026-52498

Name of the Vulnerable Software and Affected Versions Trivy versions prior to 0.71.0 Description A security scanner issue occurs when processing Helm chart archives .tgz. The custom tar unpacker uses the io.ReadAlltr function without a size limit. An attacker can provide a specially crafted...