https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 04:12:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-179037 EUVD-2026-179037 https://cve.radiocsirt.org/vuln/euvd-2026-179037 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25842 <p>All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.</p> <p>All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25842 https://cve.radiocsirt.org/vuln/ghsa-9hr3-j9mc-xmq2 <p><strong>Affected:</strong> Maven: com.alibaba.oneagent:one-java-agent-plugin</p> <p>All versions of package `com.alibaba.oneagent:one-java-agent-plugin` are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. `../../evil.exe`). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.</p> <p><strong>Affected:</strong> Maven: com.alibaba.oneagent:one-java-agent-plugin</p> <p>All versions of package `com.alibaba.oneagent:one-java-agent-plugin` are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. `../../evil.exe`). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.</p> https://cve.radiocsirt.org/vuln/ghsa-9hr3-j9mc-xmq2 https://cve.radiocsirt.org/vuln/gsd-2022-25842 gsd-2022-25842 https://cve.radiocsirt.org/vuln/gsd-2022-25842