CVE-2025-8088

CVE-2025-8088 PoC（仅限教育用途） 有关此 CVE 的详细信息，请访问：https://nvd.nist.gov/vuln/detail/CVE-2025-8088 ⚠️ 警告： 本仓库包含针对 CVE-2025-8088 的概念验证（PoC）代码。 它仅用于教育目的、研究和实验室环境 。 请不要 在你不拥有或未经明确许可测试的系统上使用此代码。 概述 本项目演示了如何将备用数据流（ADS）负载嵌入到 WinRAR 压缩包中。 它旨在展示某些 Windows 应用程序如何处理文件流和压缩包处理，专门用于研究和实验室测试 。 要点： 支持 RAR5 格式 。 支持多个诱饵文件...

CVE-2025-8088-Winrar

CVE-2025-8088 Sfruttamento WinRAR Strumento avanzato di sfruttamento del path traversal di WinRAR Un sofisticato strumento GUI per creare file RAR dannosi che sfruttano la vulnerabilità di path traversal di WinRAR CVE-2025-8088 tramite la manipolazione delle intestazioni ADS e RAR5. Caratteristic...

WinRAR-CVE-2025-8088-Exploitation-Toolkit

☠️ CVE-2025-8088 Strumento Exploit per WinRAR ☠️ ACCESSO AL SISTEMA: CONCESSO BERSAGLIO: VULNERABILITÀ WINRAR Uno strumento GUI sofisticato, di livello militare, progettato per creare archivi RAR dannosi che sfruttano la vulnerabilità di path traversal di WinRAR CVE-2025-8088. Questo strumento...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit Strumento avanzato per exploit di path traversal in WinRAR Un sofisticato strumento GUI per creare archivi RAR malevoli che sfruttano la vulnerabilità di path traversal di WinRAR CVE-2025-8088 utilizzando ADS e manipolazione degli header RAR5. Caratteristiche...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit root@kitploit: | || | \ / / | / | | | | Erweitertes WinRAR-Pfad-Traversal-Exploit-Tool Ein raffiniertes GUI-Tool zum Erstellen bösartiger RAR-Archive, die die WinRAR-Pfad-Traversal-Schwachstelle CVE-2025-8088 mithilfe von ADS- und RAR5-Header-Manipulation ausnutzen...

RAR-Anomaly-Inspector

RAR Anomaly Inspector RAR Anomaly Inspector è uno strumento PowerShell di sola lettura per ispezione statica degli archivi RAR , progettato per rilevare anomalie di path traversal relative a CVE-2025-8088 WinRAR RAR5 Path Traversal. Lo strumento non estrae né esegue il contenuto degli archivi...

WinRAR-Exploit-Tool---Rust-Edition

WinRAR Exploit Tool - Edizione Rust Strumento di Exploit per Path Traversal in WinRAR - Scritto in Rust Un'implementazione ad alte prestazioni e sicura in memoria dello strumento di exploit WinRAR CVE-2025-8088, riscritto in Rust per una maggiore affidabilità e prestazioni. Caratteristiche...

libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

libarchive security update

An update is available for libarchive. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libarchive programming library can create and read several different...

SUSE-SU-2026:23173-1 Security update for libarchive

This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. - file descriptor leak in the mtree parser cleanup path coul...

Security update for libarchive

This update for libarchive fixes the following issues: creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. file descriptor leak in the mtree parser cleanup path could le...

libarchive security update

An update is available for libarchive. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libarchive programming library can create and read several different...

RLSA-2026:52674 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...