Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads

Cybersecurity researchers have flagged a new phishing campaign that's using fake voicemails and purchase orders to deliver a malware loader called UpCrypter. The campaign leverages "carefully crafted emails to deliver malicious URLs linked to convincing phishing pages," Fortinet FortiGuard Labs...

Path Traversal

github.com/traefik/traefik is vulnerable to path traversal. The vulnerability is due to improper validation of file paths in the WASM plugin installation mechanism, which allows an attacker to supply a malicious ZIP archive with ../ sequences to overwrite arbitrary files on the system...

MAL-2025-41016 Malicious code in zip-mp3-a-lbum-do-wnload-new-vitalogy-1-tz46f-yhygln (npm)

The package zip-mp3-a-lbum-do-wnload-new-vitalogy-1-tz46f-yhygln was found to contain malicious code...

MAL-2025-41007 Malicious code in zip-mp3-a-lbum-do-wnload-new-31841-my-melody-4etja-ihiwfy (npm)

The package zip-mp3-a-lbum-do-wnload-new-31841-my-melody-4etja-ihiwfy was found to contain malicious code...

MAL-2025-41011 Malicious code in zip-mp3-a-lbum-do-wnload-new-70733-life-love-flesh-blood-txrj2-busfbz (npm)

The package zip-mp3-a-lbum-do-wnload-new-70733-life-love-flesh-blood-txrj2-busfbz was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-24431-scorpio-rising-n2jox-rfxhqe (npm)

The package zip-mp3-a-lbum-do-wnload-new-24431-scorpio-rising-n2jox-rfxhqe was found to contain malicious code...

MAL-2025-41004 Malicious code in zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir (npm)

The package zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir was found to contain malicious code...

MAL-2025-41008 Malicious code in zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt (npm)

The package zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt was found to contain malicious code...

CVE-2011-10016

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

BIT-LIBPHP-2021-21706 ZipArchive::extractTo may extract outside of destination dir

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the unzipFile function in the client.go file, which uses filepath.JoindestDir, f.Name without validating or sanitizing f.Name. An attacker can overwrite arbitrary files on the system outside of the intended...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the unzipFile function in the client.go file, which uses filepath.JoindestDir, f.Name without validating or sanitizing f.Name. An attacker can overwrite arbitrary files on the system outside of the intended...

GO-2025-3808 Chall-Manager is vulnerable to Path Traversal when extracting/decoding a zip archive in github.com/ctfer-io/chall-manager

Chall-Manager is vulnerable to Path Traversal when extracting/decoding a zip archive in github.com/ctfer-io/chall-manager...

PT-2025-41152

Name of the Vulnerable Software and Affected Versions Python versions prior to 2.3 Description The 'zipfile' module does not validate the ZIP64 End of Central Directory EOCD Locator record offset value, leading to potential discrepancies in how ZIP archives are handled compared to other ZIP...

CVE-2014-125119

CVE-2014-125119 describes a filename spoofing vulnerability in WinRAR when opening specially crafted ZIP archives. The root cause is an inconsistency between the Central Directory and Local File Header entries, which causes WinRAR to display the Central Directory filename while extracting and exe...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Erlang vulnerabilities (USN-7656-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7656-1 advisory. It was discovered that Erlang OTPs SSH module incorrectly enforced strict KEX handshake hardening measures. A remote attacker able to...

USN-7656-1: Erlang vulnerabilities

It was discovered that Erlang OTP’s SSH module incorrectly enforced strict KEX handshake hardening measures. A remote attacker able to intercept communications could possibly use this issue to insert optional messages into connections during the handshake. CVE-2025-46712 It was discovered that...

USN-7656-1 erlang vulnerabilities

It was discovered that Erlang OTP’s SSH module incorrectly enforced strict KEX handshake hardening measures. A remote attacker able to intercept communications could possibly use this issue to insert optional messages into connections during the handshake. CVE-2025-46712 It was discovered that...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the scenario decoding process. An attacker can cause excessive resource consumption by submitting a specially crafted zip archive that decompresses to a very large size...