CVE-2025-0851

CVE-2025-0851 해당 취약점은 Deep Java Library자바 딥 러닝을 오픈 소스 프레임워크에서 모델을 로드할 때 사용되는 tar 및 zip 모델 아카이브를 추출하기 위한 유틸리티를 제공 중 untar 및 unzip 기능에 File Traversal 취약점이 생겨 발생. 상세 내용 : Linux 시스템에서 압축을 생성하고 Window 시스템에서 추출할 때 추출 프로세스에 관심이 있는 대상 외부에 의도된 대상 외부에 아티팩트가 기록될 수 있습니다. 반대도 적용 가능 테스트 방법 : C:/ 경로에 해당 두개의...

neto

Project Neto: A Toolkit for Analysing Browser Plugins Overview Project Neto is a Python 3 package conceived to analyse and unravel hidden features of browser plugins and extensions for well-known browsers such as Firefox and Chrome. It automates the process of unzipping the packaged files to...

cve-2003-0282

이것은 2004년 5월 22일에 공개된 Info-ZIP 그룹의 이식 가능한 UnZip zip 파일 추출 프로그램및 관련 유틸리티의 README 파일입니다. unzip551.zip 이식 가능한 UnZip, 버전 5.51, 소스 코드 배포판 unzip551.tar.Z 위와 동일하나, compress된 tar 포맷 unzip551.tar.gz 위와 동일하나, gzip된 tar 포맷 질문하기 전에: UnZip, 그 동반 유틸리티 Zip, 그리고 관련 유틸리티 및 지원 파일은 여러 곳에서 찾을 수 있습니다. 자세한 내용은 "WHERE"...

ROOT-OS-DEBIAN-12-CVE-2021-4217 CVE-2021-4217 in unzip - Patched by Root

Root has patched CVE-2021-4217 in the unzip package for Root:Debian:12. Multiple fixed versions available...

unzip_poc

unzip 6.0용 POC CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

unzip_poc

CVE-2022-0529 and CVE-2022-0530 unzip 6.0에 대한 POC CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

[SECURITY] [DLA 4821-1] perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 05, 2026 https://wiki.debian.org/LTS -...

Debian dla-4821 : libperl-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4821 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-1 [email protected]...

CentOS Linux 7 [TuxCare] Security Update: unzip (CENTOS7:CLSA-2024:1716917767)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1716917767 advisory. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bou...

The vulnerability of the WiresharkZipHelper::unzip() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the WiresharkZipHelper::unzip function in the Wireshark network traffic analyzer is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a attacker to cause service failures or execute arbitrary code...

Rocky Linux 9.6 [TuxCare] Security Update: unzip Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778132770)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778132770 advisory. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a hea...

AlmaLinux 9.2 [TuxCare] Security Update: unzip Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778131952)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778131952 advisory. - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer...

AlmaLinux 9.6 [TuxCare] Security Update: unzip Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778132770)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778132770 advisory. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap ...

CVE-2026-101009

A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bttask.unzip of the file /www/server/panel/class/panelTask.py of the component Unzip Handler. Executing a manipulation of the argument Password can lead to os command injection. The attack...

CVE-2026-101009 aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection

A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bttask.unzip of the file /www/server/panel/class/panelTask.py of the component Unzip Handler. Executing a manipulation of the argument Password can lead to os command injection. The attack...

CVE-2026-101009 aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection

A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bttask.unzip of the file /www/server/panel/class/panelTask.py of the component Unzip Handler. Executing a manipulation of the argument Password can lead to os command injection. The attack...

EUVD-2026-88106

A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bttask.unzip of the file /www/server/panel/class/panelTask.py of the component Unzip Handler. Executing a manipulation of the argument Password can lead to os command injection. The attack...

CVE-2026-101009

A vulnerability exists in aaPanel BaoTa versions up to 11.8.0 within the Unzip Handler component. Specifically, the panelTask.bt_task._unzip function in the file /www/server/panel/class/panelTask.py is susceptible to os command injection when an attacker manipulates the Password argument. This at...

PT-2026-99784

Name of the Vulnerable Software and Affected Versions aaPanel BaoTa versions prior to 11.8.1 Description An OS command injection flaw exists in the Unzip Handler component. A remote attacker can exploit this by manipulating the Password argument within the panelTask.bt task. unzip function locate...

CVE-2026-101009: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bttask.unzip of the file /www/server/panel/class/panelTask.py of the component Unzip Handler. Executing a manipulation of the argument Password can lead to os command injection. The attack...