ZipRarHunter

ZipRarHunter ZipRarHunter è un potente strumento di hacking etico da riga di comando progettato per crackare le password di file di archivio ZIP e RAR utilizzando una wordlist. Automatizza il processo di recupero delle password da archivi crittografati. Caratteristiche Crack di file ZIP...

CVE-2022-30333

Uma prova de conceito para CVE-2022-30333 - uma vulnerabilidade de path traversal no unRAR versões anteriores a 6.11. Criei isso como uma demonstração do exploit para um artigo no AttackerKB, e espero incorporá-lo em um Módulo Metasploit em breve! Basicamente, você fornece um alvo incluindo path...

CVE-2025-24071

CVE-2025-24071 Vulnerabilità di spoofing di Windows File Explorer - CVE-2025-24071 Perdita dell'hash NTLM di Windows tramite l'estrazione di un file ZIP o RAR manipolato e sfruttando una vulnerabilità nella gestione dei file .library-ms un tipo di file utilizzato da Windows per specificare librer...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

winrar_CVE-2023-38831_lazy_poc

winrarCVE-2023-38831lazypoc Faule Methode zum Erstellen einer WinRAR-Datei für CVE-2023-38831 zum Testen Artikel, der diese Schwachstelle und das Beispiel erwähnt: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ Die von mir verwendete WinRAR-Version ist WinRAR 5.91.0 Ich habe eine...

RAR-Anomaly-Inspector

RAR Anomaly Inspector RAR Anomaly Inspector è uno strumento PowerShell di sola lettura per ispezione statica degli archivi RAR , progettato per rilevare anomalie di path traversal relative a CVE-2025-8088 WinRAR RAR5 Path Traversal. Lo strumento non estrae né esegue il contenuto degli archivi...

Detect-CVE-2018-20250

Detect-CVE-2018-20250 Questo script rileva se uno dei file .rar può avere la configurazione per sfruttare il CVE-2018-20250. Per questa rilevazione si usano il comando file e il comando strings , che sono presenti nella maggior parte delle distribuzioni linux. Uso dello script...

CVE-2026-78322

file-roller (GNOME archive manager) is affected by a stack buffer overflow in the parse_progress_line function used by its 7z and RAR handlers . When a victim opens or extracts a crafted archive containing a file entry with an excessively long path, the path is copied into a fixed-size stack buff...

CVE-2026-78322 File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers

A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...

CVE-2026-78322 File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers

A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...

CVE-2026-78322

A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...

CVE-2025-24071_PoC

CVE-2025-24071PoC CVE-2025-24071: Perdita di hash NTLM tramite estrazione RAR/ZIP e file .library-ms Windows Explorer avvia automaticamente una richiesta di autenticazione SMB quando un file .library-ms viene estratto da un archivio .rar, portando alla divulgazione dell'hash NTLM. L'utente non de...

cve-2025-5915

CVE-2025-5915 — libarchive RAR-v4-Heap-Over-Read mit On-Device-Beweis unter iOS 18.5 Ein kontrollierter Heap-Over-Read / Memory-Disclosure im RAR-v4-Filterpfad von libarchive copyfromlzsswindow. Dieses Repository reproduziert das Problem Ende-zu-Ende: lokales ASan, ein von Grund auf neu...

libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

ALSA-2026:52674 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

macOS 26.x < 26.6 Multiple Vulnerabilities (128067)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6. It is, therefore, affected by multiple vulnerabilities: - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6,...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control through a crafted RAR file. Chromium security severity: Medium...

USN-8581-1: libarchive vulnerabilities

It was discovered that libarchive did not properly manage memory when unpacking certain RAR5 archives, leading to a double free. An attacker could possibly use this issue to cause a denial of service. CVE-2026-14164 It was discovered that libarchive did not properly validate certain tar archives,...