Poc-CVE-2024-21542

Poc-CVE-2024-21542 Overview luigi is a package that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization, handling failures, command line integration, and much more. Affected versions of this package are vulnerable to Arbitrary File...

CVE-2026-90057

A flaw was found in the Linux kernel's Serial Line Internet Protocol SLIP implementation. A local attacker could exploit a race condition during a tty hangup operation, causing the slipreceivebuf function to access memory after it has been freed. This use-after-free vulnerability can lead to...

CVE-2026-25057

CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file write and enabling remote code execution. Details Archive entry names are used to construct filesystem...

PoC-CVE-2019-10743

Zip Slip Demo This project demonstrates the Zip Slip vulnerability CVE-2019-10743 using the vulnerable version of the mholt/archiver package. What is Zip Slip? Zip Slip is vulnerability that was uncovered by the security researchers from Snyk. It was found that the vulnerability is impacting...

SimpleHelp <= 5.5.7 - Arbitrary File Upload

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file i.e. zip slip. This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user. This template is a...

CVE-2024-45436

Ollama CVE-2024-45436 Exploit A clean and efficient exploit implementation for the Ollama ZIP traversal vulnerability CVE-2024-45436. 中文文档：READMECN.md Vulnerability Description CVE-2024-45436 is a path traversal vulnerability also known as "Zip Slip" in Ollama versions prior to 0.1.47. The...

exploit-workshop

exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...

CVE-2023-52076-PoC

CVE-2023-52076-PoC Proof-of-concept for CVE-2023-52076, a critical path traversal and arbitrary file write vulnerability in Atril/Xreader document viewers affecting MATE Desktop environments. The script generates a crafted EPUB payload with zip-slip paths targeting either SSH configuration or...

red-tldr

Red Team TL;DR English | 中文简体 What is Red Team TL;DR? red-tldr is a lightweight red team command lookup tool. It helps experienced red team operators quickly find the commands, techniques, and key points they need — like a man command built for offensive security. Starting from v0.5.0, red-tldr...

CVE-2019-5624

CVE-2019-5624 A proof of concept for Metasploit's CVE-2019-5624 vulnerability Rubyzip insecure ZIP handling RCE Intro In February 2019 I found a new vulnerability in the Rubyzip library. It allows an attacker to exploit insecure ZIP handling Zip Slip resulting in remote command execution. This...

evilarc

evilarc Purpose evilarc lets you create a zip file that contains files with directory traversal characters in their embedded path. Most commercial zip program winzip, etc will prevent extraction of zip files whose embedded files contain paths with directory traversal characters. However, many...

CVE-2026-112049

Vita3K before build 4187 contains a path traversal zip slip vulnerability in installarchivecontent that allows attackers to write files outside the install directory via crafted .vpk archives. Attackers can embed '..' segments or absolute paths in zip entry names to write attacker-controlled file...

EUVD-2026-103511

Vita3K before build 4187 contains a path traversal zip slip vulnerability in installarchivecontent that allows attackers to write files outside the install directory via crafted .vpk archives. Attackers can embed '..' segments or absolute paths in zip entry names to write attacker-controlled file...

CVE-2026-112049

Vita3K versions prior to build 4187 are vulnerable to a path traversal (zip slip) vulnerability within the install_archive_content() function. This flaw allows attackers to write files outside the intended installation directory by providing crafted .vpk archives containing .. segments or absolut...

CVE-2020-8254

CVE-2020-8254: Zip Slip in Pulse Secure VPN Windows Client A vulnerability in the Pulse Secure Desktop Client 9.1R9 has Remote Code Execution RCE if users can be convinced to connect to a malicious server. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here...

CVE-2026-65320-fastcore

CVE-2026-65320: Path Traversal Tar Slip in fastcore via untardir Severity: Critical, CVSS 3.1 9.8 Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected: fastcore = 2.2.30 Fixed in: Not fixed at time of writing CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory,...

Backdoor-Attack-Defense-LLMs

Interpretability-of-LLMs The IBSD is the code of the published paper "IBSD: Iterable Black-box Self-defense Against Backdoor Attacks" on the IEEE Signal Processing Letters 2025.10paper link The SLIP is the code of the published paper "SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based...

CVE-2025-67435-PoC

CVE-2025-67435 Researcher : Chowdhury Faizal Ahammed PluckCMS Zip Slip Remote Code Execution Vulnerability Report Executive Summary This report documents a critical security vulnerability discovered in PluckCMS that allows authenticated attackers to achieve remote code execution through a Zip Sli...

Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Xibo CMS Zip Slip RCE Exploit CVE-2023-33177 This exploit demonstrates a path traversal vulnerability in Xibo CMS CVE-2023-33177 that allows remote code execution through malicious layout imports. Vulnerability Details CVE/Advisory: CVE-2023-33177 Affected Versions: Xibo CMS 1.8.0 - 2.3.16 Xibo C...

ragflow-audit

ragflow-audit RAGFlow three-vulnerability audit tool CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286 ssti : Detect and exploit SSTI - RCE in the StringTransform / Message components zipslip : Offline detection of path traversal in zip entries Zip Slip apikey : Derive API key from sharing link be...