CVE-2026-30039

CVE-2026-30039 Security advisory materials for CVE-2026-30039, a symlink-based archive extraction issue in rarfile affecting versions 4.2 and earlier. English advisory | 中文版本 Overview rarfile extracts symbolic links from attacker-controlled RAR archives without validating whether the embedded...

Exploit for CVE-2026-30039

CVE-2026-30039 Security advisory materials for CVE-2026-3003...

EUVD-2007-1451

Malware in sbrugna...

EUVD-2025-7004

Malicious code in bioql PyPI...

CVE-2024-12390

A vulnerability in binary-husky/gptacademic version git 310122f allows for remote code execution. The application supports the extraction of user-provided RAR files without proper validation. The Python rarfile module, which supports symlinks, can be exploited to perform arbitrary file writes. Th...

CVE-2024-12390

The CVE-2024-12390 entry concerns binary-husky/gpt_academic (version git 310122f). The vulnerability arises during extraction of user-supplied RAR files without proper validation. Exploitation relies on the Python rarfile module (which supports symlinks) to perform arbitrary file writes, enabling...

Buffer overflow

Buffer overflow in the urarlibget function in Christian Scheurer UniquE RAR File Library unrarlib, aka URARFileLib 0.4 allows context-dependent attackers to execute arbitrary code via a long 1 filename, 2 rarfile, or 3 libpassword argument...