#DirectoryTraversal

🚨 High-risk 7-Zip issue: CVE-2025-11001 enables directory traversal → remote code execution via crafted ZIPs containing malicious symlinks. Versions <25.00 are affected.
Admins and CI/CD owners should review immediately.
#7zip #RCE #DirectoryTraversal #AppSec #SoftwareSecurity
buff.ly/k6Tv0YL
🧵1/4

Hey #directorytraversal folks. Love the memes. Is dotdotpwn still the zen tool for testing?

A hard boiled egg with "../" on it. Sanitize your inputs!

Easter has been hacked. #directorytraversal

I've been wondering for a long time if #DirectoryTraversal vulnerabilities could be mitigated by a safe path handling library (similarly to e.g. ORM's). As a side-quest, I stared to implement a prototype for Python, and I'm super interested in your unfiltered opinions:
1/2

Mirai Botnet Attacking Apache OFBiz Directory Traversal Vulnerability The notorious Mirai botnet has been observed exploiting a recently disclosed directory traversal vulnerability in Apache OFBiz.

Mirai Botnet Attacking Apache OFBiz Directory Traversal Vulnerability
gbhackers.com/apache-ofbiz...
#Infosec #Security #Cybersecurity #CeptBiro #Mirai #Botnet #Apache #OFBiz #DirectoryTraversal #Vulnerability