CVE-2022-4878 JATOS ZIP ZipUtil.java ZipUtil path traversal

A vulnerability classified as critical has been found in JATOS. Affected is the function ZipUtil of the file modules/common/app/utils/common/ZipUtil.java of the component ZIP Handler. The manipulation leads to path traversal. Upgrading to version 3.7.5-alpha is able to address this issue. The nam...

CVE-2022-4878

CVE-2022-4878 affects JATOS; the ZIP Handler’s ZipUtil.java enables path traversal. Affected versions pre-3.7.5-alpha are vulnerable; upgrading to 3.7.5-alpha addresses the issue (patch: 2b42519f309d8164e8811392770ce604cdabb5da). Multiple connected sources consistently describe the same root caus...

JATOS 路径遍历漏洞

JATOS is another tool for online learning. JATOS suffers from a path traversal vulnerability that originates in the function ZipUtil in the file modules/common/app/utils/common/ZipUtil.java of the component ZIP Handler, which manipulates to cause path traversal...

PT-2023-15892 · Jatos · Jatos

Name of the Vulnerable Software and Affected Versions: JATOS versions prior to 3.7.5-alpha Description: A critical vulnerability has been found in JATOS, affecting the ZipUtil function of the ZIP Handler component. This issue leads to path traversal. Recommendations: For versions prior to...

CVE-2022-36943

SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths which are symlinks. SSZipArchive will overwrite files on the filesystem when opening a malicious ZIP containing a symlink as the first item...

Raspberry Robin Worm Evolves to Attack Financial and Insurance Sectors in Europe

Financial and insurance sectors in Europe have been targeted by the Raspberry Robin worm, as the malware continues to evolve its post-exploitation capabilities while remaining under the radar. "What is unique about the malware is that it is heavily obfuscated and highly complex to statically...

PT-2023-13513

Name of the Vulnerable Software and Affected Versions SSZipArchive versions 2.5.3 and older Description The issue is related to an arbitrary file write vulnerability due to a lack of sanitization on paths that are symlinks. When SSZipArchive opens a malicious ZIP containing a symlink as the first...

CVE-2022-36943

SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths which are symlinks. SSZipArchive will overwrite files on the filesystem when opening a malicious ZIP containing a symlink as the first item...

SUSE SLED15: gnome-shell-search-provider-nautilus / libnautilus-extension1 / etc (SUSE-SU-2023:0006-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0006-1 advisory. - CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives bsc1205418. Tenable has extract...

SSZipArchive 后置链接漏洞

SSZipArchive is ZipArchive open source a simple utility class . It is used to compress and uncompress files on iOS, macOS and tvOS. A security vulnerability exists in SSZipArchive 2.5.3 and prior versions, which stems from its lack of sanitization of symbolic link paths causing SSZipArchive to...

SUSE-SU-2023:0006-1 Security update for nautilus

This update for nautilus fixes the following issues: - CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives bsc1205418...

Denial Of Service (DOS)

github.com/sajari/docconv is vulnerable to Denial Of Service DOS. The vulnerability exists in multiple functions because manipulation with an unknown input leads to a memory allocation when reading files from a ZIP archive...

go-unzip 路径遍历漏洞

Package go-unzip is a very simple library from the personal developer Dariusz Prząda. It is used to extract zip archives. A path traversal vulnerability exists in go-unzip, which stems from an incorrect path, where an archive containing relative file paths may cause files to be written or...

go-unzip 路径遍历漏洞

Package go-unzip is a very simple library from the personal developer Dariusz Prząda. It is used to extract zip archives. A path traversal vulnerability exists in go-unzip, which stems from an incorrect path, where an archive containing relative file paths may cause files to be written or...

CVE-2020-36628

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

CVE-2020-36628

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

Path traversal

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

CVE-2020-36628

Summary (CVE-2020-36628, Calsign APDE): A path traversal vulnerability exists in the ZIP File Handler’s CopyBuildTask.java handleExtract function of Calsign APDE. Versions prior to 0.5.2-pre2-alpha are affected; upgrading to 0.5.2-pre2-alpha mitigates the issue. The CVE impact is tied to untruste...

CVE-2020-36628 Calsign APDE ZIP File CopyBuildTask.java handleExtract path traversal

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

APDE 路径遍历漏洞

APDE is a processing IDE for creating and running sketches on Android devices by William Smith Personal Developer. A path traversal vulnerability exists in versions prior to APDE 0.5.2-pre2-alpha, which stems from a function in the...