CVE-2022-30333-PoC

CVE-2022-30333-POC Archivo de muestra para probar CVE-2022-30333 Sample.rar : si quieres probar en Linux. Al extraerlo, crea trav en ../../tmp/traversed. Asegúrate de que el directorio ../../tmp/traversed exista antes de extraer Sample.rar exp.rar : si quieres probar en el servidor de correo...

Zimbra-CVE-2022-30333

Zimbra-CVE-2022-30333 Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC. CVE-2022-30333 Zimbra UNRAR vulnerability. Unrar till V 6.11 vulnerable. Make sure your .jsp shell is undetected. This exploit will work on zimbra installed on default path. Place...

CVE-2022-30333

Una prueba de concepto para CVE-2022-30333 - una vulnerabilidad de path traversal en versiones de unRAR anteriores a la 6.11. Creé esto como una demostración del exploit para un informe de AttackerKB, ¡y espero incorporarlo pronto en un Módulo de Metasploit! Básicamente, proporcionas un objetivo...

unrar-cve-2022-30333-poc

Una prueba de concepto para CVE-2022-30333 - una vulnerabilidad de path traversal en unRAR versiones anteriores a la 6.11. Creé esto como una demostración del exploit para un artículo en AttackerKB, y espero incorporarlo en un Módulo de Metasploit pronto! Básicamente, proporcionas un destino...

Astra Linux – Vulnerability in unrar-nonfree

RARLAB’s UnRAR version prior to 6.12 on Linux and UNIX allowed directory traversal, enabling writing to files during an extraction operation also known as unpacking. This was demonstrated by creating a file named /.ssh/authorizedkeys. NOTE: WinRAR and Android RAR are not affected by this issue...

Astra Linux – Vulnerability in unrar-nonfree

RARLAB WinRAR prior to version 7.00, on Linux and UNIX platforms, allowed attackers to spoof the screen output or cause a denial of service, through ANSI escape sequences...

Astra Linux – Vulnerability in unrar-nonfree

RARLAB WinRAR Recovery Volume: Improper validation of array index leads to remote code execution vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability, as the targe...

Astra Linux – Vulnerability in unrar-nonfree

UnRAR before version 6.2.3 allowed extraction of files outside of the destination folder using symlink chains...

ROS-20260907-73-0024

The vulnerability of the RAR5 file archiver WinRAR’s volume recovery processing system, as well as the UnRAR decompression tool, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

EUVD-2025-210497

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

CVE-2025-60835

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

PT-2026-63494

Name of the Vulnerable Software and Affected Versions IZArc version 4.6 Description An issue in the unrar.dll component allows attackers to perform path traversal, a technique used to access files and directories that are stored outside the intended folder. Recommendations At the moment, there is...

CVE-2025-60835

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

CVE-2025-60835

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

CVE-2025-60835

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

The vulnerability of the RAR5 file archiver WinRAR’s recovery processing system and the UnRAR decompression tool allows a perpetrator to execute arbitrary code.

The vulnerability of the RAR5 file archiver WinRAR’s volume recovery processing system, as well as the UnRAR decompression tool, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2017-12941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. CVE-2017-12941 Note that Nessus relies on the presence of the packa...

DEBIAN-CVE-2026-14191

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...

CVE-2026-14191

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...

SUSE CVE-2026-24857

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor's embedded unrar code has a heap-buffer-overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out-of-bounds write in Unpack::CopyString, leading to a crash under ASAN and...