droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

Security Bulletin: Vulnerability in pip affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in pip has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

CVE-2025-8088

CVE-2025-8088 Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088. Safe Archive Handling PoC Educational blue-team tool inspired by path traversal issues such as CVE-2025-8088. This script helps detect and safely handle dangerous archi...

CLEANSTART-2026-BU09690 archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations

Security vulnerability affects the argo-workflows package. The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations...

CLEANSTART-2026-LZ78731 archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations

CVE-2024-24789 affects multiple packages. The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. See references for individual vulnerability details...

AndBible security vulnerability

AndBible has a security vulnerability stemming from the upload of specially crafted module ZIP files, which may allow attackers to execute arbitrary code...

IBM Langflow OSS path traversal vulnerability

IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a path traversal vulnerability. This vulnerability arises because server-generated ZIP files include entry paths that can be traversed beyond the intended extraction directory. As a result, authenticated attackers may exploit this flaw to wri...

Important: python3.12

Issue Overview: When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion. CVE-2026-15310 The HTTPPasswordMgr class in the urllib.request module, along with its...

Important: python3.11

Issue Overview: When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion. CVE-2026-15310 The HTTPPasswordMgr class in the urllib.request module, along with its...

Important: python3.13

Issue Overview: When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion. CVE-2026-15310 The HTTPPasswordMgr class in the urllib.request module, along with its...

National Security Agency Ghidra Software Reverse Engineering Framework Resource Management error vulnerability

In National Security Agency Ghidra Software Reverse Engineering Framework versions 10.3 through 12.2, there is a resource management error vulnerability. This vulnerability stems from improper handling of highly compressed data by ThemeReader.processIconFile, which fails to limit the size after...

CVE-2026-15310

A flaw was found in Python. When decompressing specially crafted zip files that use bzip, LZMA, or Zstandard compression methods, Python may pre-allocate memory based on an attacker-controlled size. This could lead to excessive memory consumption, potentially causing a Denial of Service DoS for t...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1765208529)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765208529 advisory. - Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2024_5291)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245291 advisory. golang: net: malformed DNS message can cause infinite loop CVE-2024-24788 golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-24789 golan...

OESA-2026-3920 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

SUSE CVE-2026-15310

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

UBUNTU-CVE-2026-15310

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

CVE-2026-15310

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

CVE-2026-20337

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition...

EUVD-2026-54529

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in zip files during scanning. An attacker could exploit this...