Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-30333

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.

CVE
#android#linux#auth#ssh

�4�rb�YtT՝��_ 1���TP�6 U� �5�b䗬"�d�M�#3��yo& �54�Flt����ʞÞ�-g�=t�n(X���l9[��ݢ4�M�E�h�����$���_�=� �}��������~��{ߐ�oR���ys���ͭ��UW?{N���ٵ7ף~^���ʘ�Y�O���i�P���ݟj�?�IC\1;n�5q��,Ơ�7�����gϩ�]���9ʨ�,��?��/0�Az�IGʹ�]ψ9i�u�v��#������ �+̴i�;#n7NԎ��e|t����� ό�]c��k��wl’�F��#�J/WȘ��k�e��cq�^.�"N��L�ՎG#�t�5��(��̈�f�K���� g�^�x3�<ͷ��I�����ڞ�$�Hą��M:%�^�2�ܳ �i�g�@:烮1V��&��N&1~:ẅ́q�N���D�7�_p=�7��kch��`�|��at#�v"��Q���92�p�.fLj�i3�9�3,B�,ݸ4?�vJ&β˰,aD �J�=�#b:Q�� 'e�Ü�[����|�%an����aj��J���ZN&��i’��+�i6e��@���ܰc����f~��y_�ǑA��:?��’S�Iޅ�f�4 �њ���

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda