Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-117148. PoCs published by R-73eN.
AI-analyzed exploit summary This Python script exploits a path traversal vulnerability in Express Zip <= 2.40 by creating a malicious ZIP file that extracts a file to an arbitrary location (e.g., C:\POC.txt) when extracted. The exploit leverages improper validation of '..\' sequences in the ZIP file's internal paths.
Description
Express Zip 2.40 - Directory Traversal
Exploits (1)
This Python script exploits a path traversal vulnerability in Express Zip <= 2.40 by creating a malicious ZIP file that extracts a file to an arbitrary location (e.g., C:\POC.txt) when extracted. The exploit leverages improper validation of '..\' sequences in the ZIP file's internal paths.