13831 matches found
Rocky Linux 9 [CIQ] Security Update: java-21-openjdk / java-21-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_9689)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20269689 advisory. JDK: Enhance crypto algorithm support CVE-2026-22007 JDK: Improve Kerberos credentialing CVE-2026-22013 JDK: Enhance Path Factories Redux CVE-2026-22016 JD...
CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (CENTOS8.4:CLSA-2026:1777641999)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777641999 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a...
AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1772041183)
The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1772041183 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters ...
AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1771858411)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771858411 advisory. - archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead t...
Rocky Linux 9 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (crlsa-2024_4212)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244212 advisory. golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-24789 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6...
Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2026_4672)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264672 advisory. golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip CVE-2025-61728 golang: net/url: Memory exhaustion in query...
Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2024_5291)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245291 advisory. golang: net: malformed DNS message can cause infinite loop CVE-2024-24788 golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-24789 golan...
Rocky Linux 8.6 [CIQ] Security Update: php-pecl-zip / php-pecl-zip-debuginfo / php-pecl-zip-debugsource Multiple Vulnerabilities (ciqsa-2026_0142)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260142 advisory. This advisory aggregates security fixes for the php-pecl-zip SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2020-28949, CVE-2020-36193. Tenable has...
CVE-2024-25082
⚠️ CVE-2024-25082 - Exécution de code à distance via ZIP dans FontForge PoC Exploit de preuve de concept pour CVE-2024-25082 , une vulnérabilité affectant FontForge qui permet l'exécution de code à distance RCE via une archive ZIP malveillante. Ce dépôt montre comment la vulnérabilité peut être...
7zip-CVE-2025-11001
Utilisation : python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Exploitation de 7-zip La vulnérabilité n'est exploitable que sous Windows et comporte une limitation majeure. Le bogue ne peut être exploité que lorsque 7-Zip est exécuté avec des privilèges d'administrate...
7-Zip-CVE-2025-0411-POC
🦀 Rust Macros Sans Recul Téléchargement Téléchargement 🚀 Aperçu « Rust Macros Sans Recul » offre une expérience fluide pour réduire le recul des armes dans le jeu Rust. Grâce à des scripts efficaces et des macros sur mesure, cet outil permet aux joueurs d'améliorer leur contrôle et leur précision...
ZipCracker
ZipCracker ZipCracker est un utilitaire de force brute de mots de passe simple mais puissant pour cracker les archives ZIP protégées par mot de passe. Il est construit avec Qt et intègre un moteur de craquage personnalisé, offrant à la fois une interface en ligne de commande et une interface...
AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772448200)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772448200 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters ...
AlmaLinux 9.6 [TuxCare] Security Update: nautilus / nautilus-devel / nautilus-extensions (ALMALINUX9.6:CLSA-2026:1788694397)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788694397 advisory. - GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive. CVE-2022-37290 Note that...
Rocky Linux 9.6 [TuxCare] Security Update: unzip Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778132770)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778132770 advisory. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a hea...
Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772448200)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772448200 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameter...
AlmaLinux 9.2 [TuxCare] Security Update: nautilus / nautilus-devel / nautilus-extensions (ALMALINUX9.2:CLSA-2026:1790071074)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790071074 advisory. - GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive. CVE-2022-37290 Note that...
adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)
Summary Denial of Service in adm-zip's async decompression API allows an unauthenticated attacker to crash the entire Node.js host process by supplying a single malformed ZIP file. Details Affected package: adm-zip Affected versions: at least 0.6.0 current latest; likely all versions containing t...
CVE-2025-63914
CVE-2025-63914 Divulgation publique et correctif pour CVE-2025-63914 : Vulnérabilité de bombe ZIP dans Cinnamon/kotaemon. Crédits Wang Yuanrong Résumé La fonction mayextractzip ne parvient pas à appliquer les limites de décompression ZIP, permettant à une bombe ZIP malveillante de déclencher une...
