CVE-2026-126831

A flaw was found in cpio. A local user can cause a Denial of Service DoS by triggering a stack-based buffer overflow when creating archives in tar or ustar formats. When archiving files owned by users or groups with names exceeding 32 characters, cpio copies these names into fixed-size memory...

CVE-2026-126831

A flaw was found in cpio. A local user can cause a Denial of Service DoS by triggering a stack-based buffer overflow when creating archives in tar or ustar formats. When archiving files owned by users or groups with names exceeding 32 characters, cpio copies these names into fixed-size memory...

CVE-2026-126831

A stack-based buffer overflow exists in cpio within the write_out_tar_header() function. The vulnerability occurs when creating archives in tar or ustar formats if the files are owned by users or groups with names exceeding 32 characters. Because the application fails to verify the length of thes...

CVE-2026-126831 Cpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnames

A flaw was found in cpio. A local user can cause a Denial of Service DoS by triggering a stack-based buffer overflow when creating archives in tar or ustar formats. When archiving files owned by users or groups with names exceeding 32 characters, cpio copies these names into fixed-size memory...

EUVD-2026-124565

A flaw was found in cpio. A local user can cause a Denial of Service DoS by triggering a stack-based buffer overflow when creating archives in tar or ustar formats. When archiving files owned by users or groups with names exceeding 32 characters, cpio copies these names into fixed-size memory...

CVE-2026-116330

A flaw was found in PostgreSQL. When backing up a database using the pgdump utility with tar-format archives, the generated restore script uses a predictable restriction key. A compromised or malicious database server can exploit this flaw by injecting untrusted data, leading to arbitrary code...

CVE-2026-116330 PostgreSQL pg_dump tar restore.sql fails to block psql command injection

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

CVE-2026-116330

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

wildpwn

First things first! Read: https://www.exploit-db.com/papers/33930/ Basic usage It goes something like this: usage: wildpwn.py -h --file FILE payload folder Tool to generate unix wildcard attacks positional arguments: payload Payload to use: combined | tar | rsync folder Where to write the payload...

CVE-2024-42471-PoC

CVE-2024-42471-PoC tar-fs file write/overwrite vulnerability...

npm-tar-path-traversal-scanner

CVE-2026-31802 — npm tar Path Traversal Scanner Detects npm packages vulnerable to CVE-2026-31802 , a path traversal vulnerability in the tar npm package that allows arbitrary file writes during archive extraction. Features Scans package-lock.json for vulnerable tar versions Checks nodemodules fo...

CVE-2024-12905-PoC

CVE-2024-12905 tar-fs file write/overwrite vulnerability...

CVE-2025-59284-PoC

CVE-2025-59284-PoC Proof of concept for CVE-2025-59284 libarchive exploit usage: Usage: Poc.py e.g python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar Technical writeup: https://sec-fault.com/blog/cve-2025-59284/ Video...

CVE-2019-1002101-Helpers

kubectlcpCVE-2019-1002101 PoC helper scripts and Dockerfile for CVE-2019-1002101 For detailed info, goto https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/ and...

PT-2026-145820

Untrusted data inclusion in PostgreSQL pg dump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

CVE-2026-116330: n/a PostgreSQL: Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to execute…

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

K000164206: GNU Tar vulnerability CVE-2025-45582

Security Advisory Description GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that...

wargame-tarpioka

BubbleTea CVE-2007-4559 Directory traversal vulnerability using .tar to ../../flag path BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Current Building Instructions check docker docker ps docker images docker build -t tarpioka...

SUSE CVE-2026-124745

A flaw was found in BusyBox. When extracting an archive, the tar utility improperly resolves deferred hardlink targets across symbolic links pointing outside the intended extraction directory. An attacker could provide a specially crafted archive that links to sensitive files outside the extracti...

cve-tarmageddon

CVE-2025-62518: TARmageddon This repository demonstrates a critical bug in tokio-tar and related async Rust tar libraries where PAX extended header size overrides are not applied before calculating the next header position. Bug Summary Root Cause: When processing tar files with PAX extended heade...