Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

ZIP Payload Obfuscation Through Parsing Differentials

🗓️ 28 Aug 2025 12:31:52Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 3 Views

ZIP payload obfuscation from parsing differentials due to improper ZIP validation and central directory mismatch.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.
21 Jan 202605:14
–ibm
IBM Security Bulletins		Security Bulletin: IBM watsonx.data integration has several vulnerabilities due to open source packages (CVE-2018-20225, CVE-2025-6985, CVE-2025-54368)
20 Mar 202616:39
–ibm
AlpineLinux		CVE-2025-54368
8 Aug 202500:15
–alpinelinux
Circl		CVE-2025-54368
21 Aug 202513:34
–circl
CNNVD		Astral-sh uv 安全漏洞
8 Aug 202500:00
–cnnvd
CVE		CVE-2025-54368
8 Aug 202500:00
–cve
Cvelist		CVE-2025-54368 uv is vulnerable to ZIP payload obfuscation through parsing differentials
8 Aug 202500:00
–cvelist
Debian CVE		CVE-2025-54368
8 Aug 202500:00
–debiancve
EUVD		EUVD-2025-23970
3 Oct 202520:07
–euvd
Fedora		[SECURITY] Fedora 41 Update: rust-h2-0.4.12-1.fc41
19 Aug 202504:45
–fedora
Rows per page
Vulners
Node
astraluvRange0.0.2.dev0–0.8.5python
OR
astraluvMatch0.0.5python
OR
astraluvMatch0.1.0python
OR
astraluvMatch0.1.1python
OR
astraluvMatch0.1.10python
OR
astraluvMatch0.1.11python
OR
astraluvMatch0.1.12python
OR
astraluvMatch0.1.13python
OR
astraluvMatch0.1.14python
OR
astraluvMatch0.1.15python
OR
astraluvMatch0.1.16python
OR
astraluvMatch0.1.17python
OR
astraluvMatch0.1.18python
OR
astraluvMatch0.1.19python
OR
astraluvMatch0.1.2python
OR
astraluvMatch0.1.20python
OR
astraluvMatch0.1.21python
OR
astraluvMatch0.1.22python
OR
astraluvMatch0.1.23python
OR
astraluvMatch0.1.24python
OR
astraluvMatch0.1.25python
OR
astraluvMatch0.1.26python
OR
astraluvMatch0.1.27python
OR
astraluvMatch0.1.28python
OR
astraluvMatch0.1.29python
OR
astraluvMatch0.1.3python
OR
astraluvMatch0.1.30python
OR
astraluvMatch0.1.31python
OR
astraluvMatch0.1.32python
OR
astraluvMatch0.1.33python
OR
astraluvMatch0.1.34python
OR
astraluvMatch0.1.35python
OR
astraluvMatch0.1.36python
OR
astraluvMatch0.1.37python
OR
astraluvMatch0.1.38python
OR
astraluvMatch0.1.39python
OR
astraluvMatch0.1.4python
OR
astraluvMatch0.1.40python
OR
astraluvMatch0.1.41python
OR
astraluvMatch0.1.42python
OR
astraluvMatch0.1.43python
OR
astraluvMatch0.1.44python
OR
astraluvMatch0.1.45python
OR
astraluvMatch0.1.5python
OR
astraluvMatch0.1.6python
OR
astraluvMatch0.1.7python
OR
astraluvMatch0.1.8python
OR
astraluvMatch0.1.9python
OR
astraluvMatch0.2.0python
OR
astraluvMatch0.2.1python
OR
astraluvMatch0.2.10python
OR
astraluvMatch0.2.11python
OR
astraluvMatch0.2.12python
OR
astraluvMatch0.2.13python
OR
astraluvMatch0.2.14python
OR
astraluvMatch0.2.15python
OR
astraluvMatch0.2.16python
OR
astraluvMatch0.2.17python
OR
astraluvMatch0.2.18python
OR
astraluvMatch0.2.19python
OR
astraluvMatch0.2.2python
OR
astraluvMatch0.2.20python
OR
astraluvMatch0.2.21python
OR
astraluvMatch0.2.22python
OR
astraluvMatch0.2.23python
OR
astraluvMatch0.2.24python
OR
astraluvMatch0.2.25python
OR
astraluvMatch0.2.26python
OR
astraluvMatch0.2.27python
OR
astraluvMatch0.2.28python
OR
astraluvMatch0.2.29python
OR
astraluvMatch0.2.3python
OR
astraluvMatch0.2.30python
OR
astraluvMatch0.2.31python
OR
astraluvMatch0.2.32python
OR
astraluvMatch0.2.33python
OR
astraluvMatch0.2.34python
OR
astraluvMatch0.2.35python
OR
astraluvMatch0.2.36python
OR
astraluvMatch0.2.37python
OR
astraluvMatch0.2.4python
OR
astraluvMatch0.2.5python
OR
astraluvMatch0.2.6python
OR
astraluvMatch0.2.7python
OR
astraluvMatch0.2.8python
OR
astraluvMatch0.2.9python
OR
astraluvMatch0.3.0python
OR
astraluvMatch0.3.1python
OR
astraluvMatch0.3.2python
OR
astraluvMatch0.3.3python
OR
astraluvMatch0.3.4python
OR
astraluvMatch0.3.5python
OR
astraluvMatch0.4.0python
OR
astraluvMatch0.4.1python
OR
astraluvMatch0.4.10python
OR
astraluvMatch0.4.11python
OR
astraluvMatch0.4.12python
OR
astraluvMatch0.4.13python
OR
astraluvMatch0.4.14python
OR
astraluvMatch0.4.15python
OR
astraluvMatch0.4.16python
OR
astraluvMatch0.4.17python
OR
astraluvMatch0.4.18python
OR
astraluvMatch0.4.19python
OR
astraluvMatch0.4.2python
OR
astraluvMatch0.4.20python
OR
astraluvMatch0.4.21python
OR
astraluvMatch0.4.22python
OR
astraluvMatch0.4.23python
OR
astraluvMatch0.4.24python
OR
astraluvMatch0.4.25python
OR
astraluvMatch0.4.26python
OR
astraluvMatch0.4.27python
OR
astraluvMatch0.4.28python
OR
astraluvMatch0.4.29python
OR
astraluvMatch0.4.3python
OR
astraluvMatch0.4.30python
OR
astraluvMatch0.4.4python
OR
astraluvMatch0.4.5python
OR
astraluvMatch0.4.6python
OR
astraluvMatch0.4.7python
OR
astraluvMatch0.4.8python
OR
astraluvMatch0.4.9python
OR
astraluvMatch0.5.0python
OR
astraluvMatch0.5.1python
OR
astraluvMatch0.5.10python
OR
astraluvMatch0.5.11python
OR
astraluvMatch0.5.12python
OR
astraluvMatch0.5.13python
OR
astraluvMatch0.5.14python
OR
astraluvMatch0.5.15python
OR
astraluvMatch0.5.16python
OR
astraluvMatch0.5.17python
OR
astraluvMatch0.5.18python
OR
astraluvMatch0.5.19python
OR
astraluvMatch0.5.2python
OR
astraluvMatch0.5.20python
OR
astraluvMatch0.5.21python
OR
astraluvMatch0.5.22python
OR
astraluvMatch0.5.23python
OR
astraluvMatch0.5.24python
OR
astraluvMatch0.5.25python
OR
astraluvMatch0.5.26python
OR
astraluvMatch0.5.27python
OR
astraluvMatch0.5.28python
OR
astraluvMatch0.5.29python
OR
astraluvMatch0.5.3python
OR
astraluvMatch0.5.30python
OR
astraluvMatch0.5.31python
OR
astraluvMatch0.5.4python
OR
astraluvMatch0.5.5python
OR
astraluvMatch0.5.6python
OR
astraluvMatch0.5.7python
OR
astraluvMatch0.5.8python
OR
astraluvMatch0.5.9python
OR
astraluvMatch0.6.0python
OR
astraluvMatch0.6.1python
OR
astraluvMatch0.6.10python
OR
astraluvMatch0.6.11python
OR
astraluvMatch0.6.12python
OR
astraluvMatch0.6.13python
OR
astraluvMatch0.6.14python
OR
astraluvMatch0.6.15python
OR
astraluvMatch0.6.16python
OR
astraluvMatch0.6.17python
OR
astraluvMatch0.6.2python
OR
astraluvMatch0.6.3python
OR
astraluvMatch0.6.4python
OR
astraluvMatch0.6.5python
OR
astraluvMatch0.6.6python
OR
astraluvMatch0.6.7python
OR
astraluvMatch0.6.8python
OR
astraluvMatch0.6.9python
OR
astraluvMatch0.7.0python
OR
astraluvMatch0.7.1python
OR
astraluvMatch0.7.10python
OR
astraluvMatch0.7.11python
OR
astraluvMatch0.7.12python
OR
astraluvMatch0.7.13python
OR
astraluvMatch0.7.14python
OR
astraluvMatch0.7.15python
OR
astraluvMatch0.7.16python
OR
astraluvMatch0.7.17python
OR
astraluvMatch0.7.18python
OR
astraluvMatch0.7.19python
OR
astraluvMatch0.7.2python
OR
astraluvMatch0.7.20python
OR
astraluvMatch0.7.21python
OR
astraluvMatch0.7.22python
OR
astraluvMatch0.7.3python
OR
astraluvMatch0.7.4python
OR
astraluvMatch0.7.5python
OR
astraluvMatch0.7.6python
OR
astraluvMatch0.7.7python
OR
astraluvMatch0.7.8python
OR
astraluvMatch0.7.9python
OR
astraluvMatch0.8.0python
OR
astraluvMatch0.8.1python
OR
astraluvMatch0.8.2python
OR
astraluvMatch0.8.3python
OR
astraluvMatch0.8.4python

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Dec 2025 07:33Current
6.6Medium risk
Vulners AI Score6.6
CVSS 46.8
EPSS0.00183
SSVC
zip payloadparsing differentialsarchive validationcentral directorystacked archivespackage installers
3