CVE-2025-8088 – WinRAR 0-Day Path Traversal Vulnerability Exploited to Execute Malware

Threat Score:
79
Cybersecurity News
3 hours ago

Overview

Limited Content Available

We were unable to pull all insights from this article. Clustering, as well as Threat and Business intelligence may be limited.

A zero-day vulnerability in WinRAR allows malware to be deployed on unsuspecting users’ systems, highlighting the ongoing threats to popular software. Tracked as CVE-2025-8088, this path traversal flaw affects the Windows version of the widely used file archiving tool, enabling attackers to execute arbitrary code through specially crafted archives. The vulnerability, discovered in mid-July 2025, […]...

Related Articles

5 articles
2

‘Blue Locker’ Ransomware Targeting Oil & Gas Sector in Pakistan

Security Affairs • 2 hours ago

Blue Locker ransomware hits Pakistan’s oil & gas sector, severely impacting Pakistan Petroleum; NCERT warns ministries of severe ongoing risk. This week Pakistan’s National Cyber Emergency Response Team (NCERT – National CERT – Pakistan) has issued an advisory to 39 key ministries and institutions and warned them of a “severe risk” posed by the ongoing […]

Score
87
Read more
3

Palo Alto GlobalProtect Vulnerability Allows Privilege Escalation via Certificate Bypass

GB Hackers • 1 hour ago

Palo Alto GlobalProtect Vulnerability Allows Privilege Escalation via Certificate Bypass A newly disclosed vulnerability in Palo Alto Networks’ GlobalProtect application could allow attackers to escalate privileges and install malicious software on affected systems through improper certificate validation. The security flaw, tracked asCVE-2025-2183, was published on August 13, 2025, and affects multiple versions of the popular VPN client across Windows and Linux platforms. Critical Security Flaw

Score
85
Read more
5
Source Code of ERMAC V3.0 Malware Exposed by ‘changemeplease’ Password

Source Code of ERMAC V3.0 Malware Exposed by ‘changemeplease’ Password

GB Hackers • 1 hour ago

Source Code of ERMAC V3.0 Malware Exposed by ‘changemeplease’ Password A significant security breach has exposed the complete source code of ERMAC V3.0, a sophisticated banking trojan that targets over 700 financial applications worldwide. The leak,discoveredby cybersecurity firm Hunt.io in March 2024, was made possible by a surprisingly weak default password: “changemeplease.” The discovery occurred when Hunt.io researchers identified an open directory containing the complete ERMAC V3.0 source

Score
83
Read more