Most recent entries from all

BREW-bbot-CVE-2025-10284 — BBOT's various issues in unarchive.py can cause arbitrary file write and RCE

2026-10-03T18:27:24.730969+00:00

Affected: Homebrew: bbot

### Summary

Various issues in bbot's `unarchive.py` allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution (RCE).

### Impact

A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.

EUVD-2026-254547

2026-10-03T18:27:24.731031+00:00

EUVD-2026-254547

fkie_cve-2025-10284

2026-10-03T18:27:24.731049+00:00

BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution.

GHSA-fhw8-8v9p-7jp7 — BBOT's various issues in unarchive.py can cause arbitrary file write and RCE

2026-10-03T18:27:24.731074+00:00

Affected: PyPI: bbot

### Summary

Various issues in bbot's `unarchive.py` allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution (RCE).

### Impact

A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.

PYSEC-2026-292 — BBOT's various issues in unarchive.py can cause arbitrary file write and RCE

2026-10-03T18:27:24.731098+00:00

Affected: PyPI: bbot

### Summary

Various issues in bbot's `unarchive.py` allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution (RCE).

### Impact

A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.