Directory Traversal

Overview nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Directory Traversal via the model loading process. An attacker can execute arbitrary code and tamper with data by supplying a .nemo file containing maliciously crafted metadata...

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

Cybersecurity researchers have discovered a new malvertising campaign that's designed to infect victims with a multi-stage malware framework called PS1Bot. "PS1Bot features a modular design, with several modules delivered used to perform a variety of malicious activities on infected systems,...

Directory Traversal

Overview studio-42/elfinder is an open-source file manager for web, written in JavaScript using jQuery UI. Affected versions of this package are vulnerable to Directory Traversal via the onShutdown function in the elFinder.class.php file. An attacker can delete arbitrary files by sending crafted...

CVE-2025-45317

A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive...

PT-2025-33085 · Realnetworks · Netzip Classic

Name of the Vulnerable Software and Affected Versions: Real Networks Netzip Classic version 7.5.1.86 Description: Real Networks Netzip Classic version 7.5.1.86 is susceptible to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The issue occurs when the application...

CVE-2025-45317

A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive...

7-Zip < 25.01

The version of 7-Zip installed on the remote host is prior to 25.01. It is, therefore, affected by a security bypass vulnerability. The code for handling symbolic links has been changed to provide greater security when extracting files from archives. Command line switch -snld20 can be used to...

Real Networks Netzip Classic 安全漏洞

Real Networks Netzip Classic is a file compression and download management tool from Real Networks, Inc. A security vulnerability exists in Real Networks Netzip Classic version 7.5.1.86, which originates from a stack buffer overflow when parsing a ZIP file and could lead to the execution of...

PT-2025-33052 · Unknown · Hortusfox-Web

Name of the Vulnerable Software and Affected Versions: hortusfox-web version 4.4 Description: A zip slip vulnerability exists in the /modules/ImportModule.php component. This allows attackers to execute arbitrary code by using a crafted archive. Recommendations: Update to a newer version that...

CVE-2025-45317

A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive...

CVE-2025-45317

The CVE-2025-45317 entry concerns hortusfox-web v4.4 with a zip-slip vulnerability in the /modules/ImportModule.php component. The underlying issue is improper handling of compressed archives, enabling arbitrary code execution when processing a crafted archive. Affected software is hortusfox-web ...

SUSE CVE-2025-55188

7-Zip before 25.01 does not always properly handle symbolic links during extraction...

BIT-LIBPHP-2021-21706 ZipArchive::extractTo may extract outside of destination dir

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS...

BIT-LIBPYTHON-2024-0450 Quoted zip-bomb protection for zipfile

An issue was found in the CPython zipfile module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython...

Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities

Summary Open source software is used by Astronomer with IBM as part of overall processing functionality. Vulnerability Details CVEID:CVE-2021-33194 DESCRIPTION: golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service infinite loop via crafted...

Exploit for Link Following in 7-Zip

CVE-2025-55188-7z-exploit --- 7-Zip Symlink Arbitrary File...

CVE-2025-55188

A flaw was found in 7zip. The vulnerability stems from improper handling of symbolic links during file extraction, potentially allowing a local attacker to trigger an application level denial of service via a crafted archive file. This occurs because the software fails to validate symbolic link...

Linux Distros Unpatched Vulnerability : CVE-2025-47814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in...

Directory Traversal

Overview tiny-scientist is an A lightweight framework for building research agents Affected versions of this package are vulnerable to Directory Traversal via the reviewpaper function in the backend/app.py file. An attacker can access arbitrary PDF files on the server by supplying crafted file...

Linux Distros Unpatched Vulnerability : CVE-2025-53817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference i...