zombieguard

ZombieGuard 一款用于检测 ZIP 压缩包中结构元数据规避行为的防御性扫描器。 ZombieGuard 检测 ZIP 本地文件头、中央目录记录与负载特性之间的矛盾。这些矛盾可用于让压缩包内容对一个解析器显示为空或无害，而另一个解析器仍能访问到负载。 它结合了一个有界 ZIP 解析器与一个小型 LightGBM 模型。它不会解压或执行压缩包内容。 !IMPORTANT ZombieGuard 检测的是压缩包规避信号，而非恶意软件。干净的结果并不能证明压缩包内的文件是安全的。 60 秒快速上手 ZombieGuard 支持 Python 3.11 和 3.12。...

ZipRarHunter

ZipRarHunter ZipRarHunter は、ワードリストを使用して ZIP および RAR アーカイブファイルのパスワードを解読するために設計された、強力なコマンドライン倫理的ハッキングツールです。暗号化されたアーカイブからのパスワード回復プロセスを自動化します。 特徴 ZipCrypto と AES-256 の両方の暗号化で暗号化された ZIP ファイルの解読 マルチスレッドのブルートフォース攻撃を使用した RAR4 アーカイブの解読 有料版の UnRAR がインストールされている場合は RAR5 もサポート スレッドモードでは --threads デフォルト:...

Se7enSlip

🔒 Se7enSlip - 7-Zip 漏洞扫描器 一个令人惊叹的交互式 Web 应用程序，用于演示和帮助检测 7-Zip 压缩包中的关键 CVE-2023-52169 符号链接遍历漏洞。 ⚡ 功能特性 🎯 核心功能 ZIP 上传与分析 - 拖放或点击上传 ZIP 文件，进行全面的安全分析 实时扫描 - 针对路径遍历、符号链接和恶意条目的高级模式检测 详细报告 - 包含风险评估和建议的高管级报告 交互式演示 - 展示攻击流程的动画漏洞说明 🎨 高级 UI/UX 矩阵雨效果 - 带有下落数字字符的动画背景 浮动粒子 - 增强视觉吸引力的动态粒子系统 流畅动画 -...

ZipCracker

ZipCracker ZipCracker 是一款简洁而强大的密码暴力破解工具，用于破解受密码保护的ZIP压缩包。 它基于Qt构建，集成了自定义破解引擎，同时提供CLI和GUI支持。 ⚡ 免责声明： 此工具仅供教育目的、恢复您自己的压缩包以及安全研究 使用。 作者不对滥用行为负责。 特性 使用可配置字符集暴力破解ZIP文件密码 可调节最小和最大密码长度 多种破解模式 实时进度反馈 找到后显示密码 跨平台支持（Windows和Linux） 用法 1. 下载并启动程序 下载 Windows 版 下载 Linux 版 2. 配置设置 ZIP文件 – 选择目标压缩包 字符集 –...

CVE-2024-55587

CVE-2024-55587 Este repositorio es una prueba de concepto para la vulnerabilidad CVE-2024-55587 en la biblioteca Python libarchive. El archivo generatezip crea un zip malicioso que explotará la extracción insegura de archivos en el método extractall de libarchive. El archivo vulnerablezip es solo...

CVE-2026-17014

The CVE-2026-17014 entry affects the WP Photo Album Plus WordPress plugin prior to 9.2.07.002. The public REST endpoint action lacks capability or nonce checks, allowing unauthenticated users to delete generated album export ZIP archives stored by the plugin. This is the root cause and directly e...

SUSE CVE-2026-47078

Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

PYSEC-2026-2875 pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...

PYSEC-2026-2856 OpenViking contains a Path Traversal vulnerability

OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write files outside the intended import directory. Attackers can craft malicious ZIP archives with traversal sequences, absolute paths, or...

PT-2026-59494

OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write files outside the intended import directory. Attackers can craft malicious ZIP archives with traversal sequences, absolute paths, or...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the Include.parse process. An attacker can access arbitrary files outside the intended markdown directory by supplying crafted include paths when markdown files are processed using md.read. Details A Directory...

CVE-2026-14966

BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing carries a DOS-attribute prefix before the unix mode, as produced by legacy versions of p7zip. Such an archive, downloaded and extracted...

CVE-2026-14966 Symlink guard bypass in unarchive module allows planting symlinks during extraction

BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing carries a DOS-attribute prefix before the unix mode, as produced by legacy versions of p7zip. Such an archive, downloaded and extracted...

EUVD-2026-42295

BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing carries a DOS-attribute prefix before the unix mode, as produced by legacy versions of p7zip. Such an archive, downloaded and extracted...

vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

A flaw was found in Vim's zip.vim plugin. A local user could be tricked into opening a specially crafted zip archive, which would allow a path traversal bypass. This vulnerability enables an attacker to overwrite arbitrary files on the system, potentially leading to data integrity issues or furth...

CVE-2026-56876

extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to point outside the extraction directory...

EUVD-2026-39812

extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to point outside the extraction directory...

CVE-2026-56876

extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to point outside the extraction directory...

Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access

In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. References 4. Learn more Microsoft Threat Intelligence has identified an active multi-stage intrusion campaign targeting organizations in the hospitality and hotel industry since April 2026. We’ve observed this...