CVE-2025-0851

This repository describes a file traversal vulnerability (CVE-2025-0851) in the Deep Java Library's tar/zip extraction utility, allowing arbitrary file writes outside the intended directory during model loading. The issue arises from improper handling of absolute paths in `dest.resolve(name).toAbsolutePath()`, enabling path traversal attacks.

This repository contains functional exploit code for CVE-2025-32433, targeting Erlang/OTP SSH. The PoC demonstrates a pre-authentication RCE vulnerability by sending crafted SSH packets to execute arbitrary commands on the server.