CVE-2021-28876

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls iteratorgetunchecked more than once for the same index when the underlying iterator panics in certain conditions. This bug could lead to a memory safety violation due to an unmet safety...

CVE-2021-28879

In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again...

CVE-2021-28879

CVE-2021-28879 affects the Rust standard library prior to 1.52.0, specifically the Zip implementation. The bug permits reporting an incorrect size due to an integer overflow, which can cause a buffer overflow when a consumed Zip iterator is used again. The issue is documented across multiple conn...

CVE-2021-28879

In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again...

CVE-2021-28878

In the standard library in Rust before 1.52.0, the Zip implementation calls iteratorgetunchecked more than once for the same index under certain conditions when nextback and next are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the...

CVE-2021-28878

In the standard library in Rust before 1.52.0, the Zip implementation calls iteratorgetunchecked more than once for the same index under certain conditions when nextback and next are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the...

PT-2021-17973 · Rust +6 · Rust +6

Name of the Vulnerable Software and Affected Versions: Rust versions prior to 1.51.0 Description: The issue arises from the Zip implementation in the standard library, which calls iterator get unchecked for the same index more than once when nested. This can lead to a memory safety violation due ...

PT-2021-17974 · Rust +6 · Rust +6

Name of the Vulnerable Software and Affected Versions: Rust versions prior to 1.52.0 Description: The issue arises in the standard library of Rust when the Zip implementation calls iterator get unchecked more than once for the same index under certain conditions, specifically when next back and...

CVE-2021-28876

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls iteratorgetunchecked more than once for the same index when the underlying iterator panics in certain conditions. This bug could lead to a memory safety violation due to an unmet safety...

CVE-2021-28876

The CVE-2021-28876 issue affects the Rust standard library’s Zip implementation up to Rust 1.51.x, where __iterator_get_unchecked() can be invoked more than once for the same index if the underlying iterator panics. This creates a memory-safety violation risk related to TrustedRandomAccess. Impac...

CVE-2021-28878

CVE-2021-28878 affects the Rust standard library before 1.52.0. The Zip implementation can call __iterator_get_unchecked() more than once for the same index when next_back() and next() are used together, creating a memory-safety vulnerability related to TrustedRandomAccess. Affected releases incl...

CVE-2021-28877

In the standard library in Rust before 1.51.0, the Zip implementation calls iteratorgetunchecked for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait...

CVE-2021-20692

Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading a user to expand a malicious ZIP archives...

Directory traversal

Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading a user to expand a malicious ZIP archives...

CVE-2021-20692

The CVE-2021-20692 entry concerns the Archive collectively operation utility by EikiSoft. The connected documents specify a directory traversal (CWE-22) vulnerability in version 2.10.1.0 and earlier, where extracting a crafted ZIP archive can cause arbitrary files to be created or overwritten in ...

CVE-2021-20692

Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading a user to expand a malicious ZIP archives...

Hackers Targeting professionals With 'more_eggs' Malware via LinkedIn Job Offers

A new spear-phishing campaign is targeting professionals on LinkedIn with weaponized job offers in an attempt to infect targets with a sophisticated backdoor trojan called "moreeggs." To increase the odds of success, the phishing lures take advantage of malicious ZIP archive files that have the...

Fake LinkedIn job offers scam spreading More_eggs backdoor

By Waqas According to researchers, threat actors are using zip files to trick LinkedIn users into executing the Moreeggs backdoor. This is a post from HackRead.com Read the original post: Fake LinkedIn job offers scam spreading Moreeggs backdoor...

CVE-2021-24161

In the Reponsive Menu free and Pro WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted si...

CVE-2021-24160

In the Reponsive Menu free and Pro WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to trigger remote code execution and...