In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Published: 2025-04-23
CVSS: 3.3
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Download Exploit for CVE-2025-46394 here:
Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.
https://augustaverburg.nl/exploit-554-cve-2023-35311/
https://augustaverburg.nl/exploit-262-cve-2023-20593/
https://augustaverburg.nl/exploit-91-cve-2019-1405/
https://augustaverburg.nl/exploit-454-cve-2024-2236/