Most recent entries from all

BREW-bbot-CVE-2025-10284 — BBOT's various issues in unarchive.py can cause arbitrary file write and RCE

2026-10-02T17:10:35.683681+00:00

Affected: Homebrew: bbot

### Summary

Various issues in bbot's `unarchive.py` allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution (RCE).

### Impact

A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.

CVE-2025-10284 — Improper Archive Extraction in unarchive Enables RCE

2026-10-02T17:10:35.683730+00:00

Affected: BLSOPS, LLC bbot

BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution.

GHSA-fhw8-8v9p-7jp7 — BBOT's various issues in unarchive.py can cause arbitrary file write and RCE

2026-10-02T17:10:35.683758+00:00

Affected: PyPI: bbot

### Summary

Various issues in bbot's `unarchive.py` allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution (RCE).

### Impact

A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.