Zdir

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-66945 CRITICAL POC Act Now

Zip slip to arbitrary file write in Zdir Pro 4.x ZIP extraction API. PoC available.

RCE Path Traversal Zdir

NVD GitHub

CVSS 3.1

9.1

EPSS

0.1%

CVE-2023-23314 HIGH POC This Week

An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Path Traversal File Upload Zdir

NVD GitHub

CVSS 3.1

8.8

EPSS

1.2%

CVE-2025-66945

EPSS 0% CVSS 9.1

CRITICAL POC Act Now

Zip slip to arbitrary file write in Zdir Pro 4.x ZIP extraction API. PoC available.

RCE Path Traversal Zdir

NVD GitHub

CVE-2023-23314

EPSS 1% CVSS 8.8

HIGH POC This Week

RCE Path Traversal File Upload +1

NVD GitHub