unrar-cve-2022-30333-poc

CVE-2022-30333 の概念実証 - unRAR バージョン 6.11 未満におけるパストラバーサル脆弱性です。AttackerKB の記事向けにエクスプロイトのデモとして作成し、近々 Metasploit モジュールに組み込む予定です。 基本的には、ターゲット（パストラバーサルを含む）とファイルデータを指定すると、そのファイルを指定された場所に展開する .rar ファイルを生成します。最大ファイル長は 104 バイト、最大ファイルサイズは 4096 バイトです。（これは脆弱性に固有の制限ではなく、ファイルを生成する際に私が設定した値です。） 例えば、msfvenom...

Zimbra-CVE-2022-30333

Zimbra-CVE-2022-30333 Zimbra unrar 취약점. 이제 이미 공개된 POC가 있으므로, 저희의 POC를 공개해도 안전합니다. CVE-2022-30333 Zimbra UNRAR 취약점. Unrar V 6.11까지 취약. .jsp 쉘이 탐지되지 않도록 하세요. 이 익스플로잇은 기본 경로에 설치된 zimbra에서 작동합니다. 웹쉘을 rootver 폴더에 넣으세요. 기존 shell.jsp 파일을 제거하세요. 그런 다음 rootver 폴더를 rar로 압축하세요. ZIP이 아니라 rar만 가능합니다. 그런 다음...

CVE-2022-30333-PoC

CVE-2022-30333-POC CVE-2022-30333을 테스트하기 위한 샘플 파일 Sample.rar : Linux에서 테스트하려는 경우. 압축을 풀면 ../../tmp/traversed 에 trav 가 생성됩니다. Sample.rar을 추출하기 전에 ../../tmp/traversed 디렉토리가 존재하는지 확인하십시오. exp.rar : Zimbra 메일 서버에서 테스트하려는 경우. 압축을 풀면 /opt/zimbra/jettybase/webapps/zimbra/public/에 moo.txt 가 생성됩니다. 이 파일은...

CVE-2022-30333

CVE-2022-30333（unRARバージョン6.11より前のパストラバーサル脆弱性）の概念実証です。AttackerKBの記事向けにエクスプロイトのデモとして作成し、近いうちにMetasploitモジュールに組み込む予定です！ 基本的には、ターゲット（パストラバーサルを含む）とファイルデータを指定すると、このツールがその場所にファイルを展開する.rarファイルを生成します。最大ファイル長は104バイト、最大ファイル長は4096バイトです。（これは脆弱性に固有のものではなく、ファイル生成時に私が選択したものです）。 例えば、msfvenom でバックドアを生成します： $...

Astra Linux – Vulnerability in unrar-nonfree

RARLAB WinRAR prior to version 7.00, on Linux and UNIX platforms, allowed attackers to spoof the screen output or cause a denial of service, through ANSI escape sequences...

Astra Linux – Vulnerability in unrar-nonfree

RARLAB’s UnRAR version prior to 6.12 on Linux and UNIX allowed directory traversal, enabling writing to files during an extraction operation also known as unpacking. This was demonstrated by creating a file named /.ssh/authorizedkeys. NOTE: WinRAR and Android RAR are not affected by this issue...

Astra Linux – Vulnerability in unrar-nonfree

UnRAR before version 6.2.3 allowed extraction of files outside of the destination folder using symlink chains...

Astra Linux – Vulnerability in unrar-nonfree

RARLAB WinRAR Recovery Volume: Improper validation of array index leads to remote code execution vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability, as the targe...

ROS-20260907-73-0024

The vulnerability of the RAR5 file archiver WinRAR’s volume recovery processing system, as well as the UnRAR decompression tool, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2025-60835

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

CVE-2025-60835

The unrar.dll component in IZArc v4.6 is vulnerable to a path traversal issue. This vulnerability allows an attacker to access files and directories located outside the intended folder by utilizing the traversal technique. No information regarding a patched version or a specific fix is currently ...

EUVD-2025-210497

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

PT-2026-63494

Name of the Vulnerable Software and Affected Versions IZArc version 4.6 Description An issue in the unrar.dll component allows attackers to perform path traversal, a technique used to access files and directories that are stored outside the intended folder. Recommendations At the moment, there is...

CVE-2025-60835

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

CVE-2025-60835

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

The vulnerability of the RAR5 file archiver WinRAR’s recovery processing system and the UnRAR decompression tool allows a perpetrator to execute arbitrary code.

The vulnerability of the RAR5 file archiver WinRAR’s volume recovery processing system, as well as the UnRAR decompression tool, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2017-12941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. CVE-2017-12941 Note that Nessus relies on the presence of the packa...

DEBIAN-CVE-2026-14191

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...

CVE-2026-14191

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...

CVE-2026-14191: Out-of-bounds Write

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...