ExploitPublished
HUSTOJ Zip-Slip v26.01.24 - RCE
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 6 May 2026, 02:38 UTC
What to do
AI-suggested
Until an official fix is available, avoid processing untrusted archive files with HUSTOJ Zip-Slip version 26.01.24 or apply manual mitigations to validate and sanitize archive contents before extraction.
Description
HUSTOJ Zip-Slip v26.01.24 - RCE
Indicators of compromise
Exploit source code
# Exploit Title: HUSTOJ Zip-Slip v26.01.24 - RCE
# Date: 2026-02-14
# Exploit Author: Marshall Whittaker / oxagast
# Vendor Homepage: https://github.com/zhblue/hustoj
# Software Link: http://123.158.38.129:8090/livecd/HUSTOJ25.05.iso
(LiveCD, or see above git repo)
# Version: Before v26.01.24
# Tested on: Ubuntu
# CVE: CVE-2026-24479
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
# This payload is …References
Community reviews
Loading reviews…