2244 matches found
CVE-2024-43399
Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Before 4.0.7, there is a flaw in the Static Libraries analysis section. Specifically, during the extraction of .a extension files, the measure...
CVE-2024-21518
This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to improper sanitization of the target path, allowing files within a malicious archive to traverse the filesystem and be extracted to arbitrary locations. An...
CVE-2024-21542
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper destination file path validation in the extractpackagesarchive function...
CVE-2024-21852
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the filesystem and filesystem-nio2 storage backends. Users of these storage backends could unintentionally expose local files to authenticated clients. Details A Directory Traversal attack also known as path...
Malicious code in check-slip-chii (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-815 Malicious code in check-slip-chii (npm)
--- -= Per source details. Do not edit below this line.=-...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the LocalStorage component where specially crafted Content-Disposition headers containing .. in the filename could be used to access files outside the intended storage directories. Details A Directory Traversal...
GO-2025-3413 HashiCorp go-slug Vulnerable to Zip Slip Attack in github.com/hashicorp/go-slug
HashiCorp go-slug Vulnerable to Zip Slip Attack in github.com/hashicorp/go-slug...
PT-2025-2921
Name of the Vulnerable Software and Affected Versions Apache Solr versions 6.6 through 9.7.0 Description Apache Solr instances running on Windows are susceptible to arbitrary file path write access due to insufficient input validation in the 'configset upload' API. This is commonly known as a...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the archive extraction process. An attacker can execute arbitrary code by uploading a specially crafted archive that manipulates file paths to traverse directories and place...
CVE-2025-23011
CVE-2025-23011 refers to a path traversal vulnerability in Fedora Repository 3.8.1 (Zip Slip). A remote, authenticated attacker can upload a specially crafted archive that results in extracting an arbitrary JSP file to a location that can be executed via an unauthenticated GET request. This versi...
PT-2025-4764 · Fedora · Fedora Repository
Name of the Vulnerable Software and Affected Versions: Fedora Repository version 3.8.1 Description: The issue allows path traversal when extracting uploaded archives, also known as "Zip Slip". A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary J...
SUSE CVE-2025-0377
HashiCorp's go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal which allows an authenticated user to delete files on the server via the filemanager process. Details A Directory Traversal attack also known as path traversal aims to access files and directories that are stored...
HashiCorp go-slug Vulnerable to Zip Slip Attack
Summary HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. This vulnerability, identified as CVE-2025-0377, is fixed in go-slug 0.16.3. Background HashiCorp’s go-slug shared library offers functions for...
GHSA-WPFP-CM49-9M9Q HashiCorp go-slug Vulnerable to Zip Slip Attack
Summary HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. This vulnerability, identified as CVE-2025-0377, is fixed in go-slug 0.16.3. Background HashiCorp’s go-slug shared library offers functions for...
CVE-2025-0377
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry...
HashiCorp go-slug Vulnerable to Zip Slip Attack
Summary HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. This vulnerability, identified as CVE-2025-0377, is fixed in go-slug 0.16.3. Background HashiCorp’s go-slug shared library offers functions for...
