1626 matches found
7-Zip Mark-of-the-Web Code Execution
The vulnerability of the Mark-of-the-Web protection mechanism in the 7-Zip compressor is related to a breach of the data protection mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...
7-Zip < 24.09 (ZDI-25-045)
The version of 7-Zip installed on the remote host is prior to 24.09. It is, therefore, affected by a vulnerability as referenced in the ZDI-25-045 advisory. - The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-We...
7-Zip Mark-of-the-Web Bypass
Proof of concept exploit that allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. All versions before 24.09 are considered vulnerable...
Exploit for Protection Mechanism Failure in 7-Zip
7-Zip Mark-of-the-Web Bypass Vulnerability CVE-2025-0411 - P...
Exploit for Protection Mechanism Failure in 7-Zip
7-Zip Mark-of-the-Web Bypass Vulnerability CVE-2025-0411 - P...
7-Zip bug could allow a bypass of a Windows security feature. Update now
A patch is available for a vulnerability in 7-Zip that could have allowed attackers to bypass the Mark-of-the-Web MotW security feature in Windows. The MotW is an attribute added to files by Windows when they have been sourced from an untrusted location, like the internet or a restricted zone. Th...
SUSE CVE-2025-0411
7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...
7-Zip Mark-of-the-Web Bypass Vulnerability (Jan 2025) - Windows
7zip is prone to a mark-of-the-web bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:7-zip:7-zip";...
7-Zip Mark-of-the-Web Bypass Vulnerability
This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2025-23963
Missing Authorization vulnerability in flymke Mark Posts mark-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark Posts: from n/a through = 2.2.4...
WordPress Mark Posts plugin <= 2.2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Mark Posts versions = 2.2.4...
CVE-2025-23963: Missing Authorization
Missing Authorization vulnerability in flymke Mark Posts mark-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark Posts: from n/a through = 2.2.4...
WordPress plugin Mark Posts has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-5237
Name of the Vulnerable Software and Affected Versions Mark Posts versions n/a through 2.2.3 Description The issue affects Mark Posts due to a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations For versions n/a throu...
A week in security (January 6 – January 12)
Last week on Malwarebytes Labs: Dental group lied through teeth about data breach, fined $350,000 AI-supported spear phishing fools more than 50% of targets US Cyber Trust Mark logo for smart devices is coming GroupGreeting e-card site attacked in "zqxq" campaign Massive breach at location data...
US Cyber Trust Mark logo for smart devices is coming
The White House announced the launch of the US Cyber Trust Mark which aims to help buyers make an informed choice about the purchase of wireless internet-connected devices, such as baby monitors, doorbells, thermostats, and more. The cybersecurity labeling program for wireless consumer Internet o...
FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance
The U.S. government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things IoT consumer devices. "IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission FCC said. "Under thi...
PT-2025-8805
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the nilfs2 filesystem. The issue occurs when the filesystem detects corruption and falls back to read-only, causing...
CVE-2024-13021
A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue is some unknown functionality of the file /endpoint/add-mark.php. The manipulation of the argument markname/details leads to cross site scripting. The attack...
CVE-2024-13021
CVE-2024-13021 affects SourceCodester Road Accident Map Marker 1.0. The issue is a stored/reflective cross-site scripting vulnerability in the /endpoint/add-mark.php endpoint, triggered by manipulating the mark_name/details parameters. The public exploit is reported, and multiple sources corrobor...