Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
MAL-005 — MAL-005: Zip Slip in Add Carbon Applications in WSO2 ESB | Kitploit
Tools/GitHubGitHub/mbadanoiu/mal-005
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubmbadanoiu/mal-005

MAL-005

MAL-005: Zip Slip in Add Carbon Applications in WSO2 ESB

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

MAL-005: Zip Slip in Add Carbon Applications in WSO2 ESB

A ZIP file based directory traversal (Zip Slip) vulnerability was identified in the "Carbon Applications" add feature of WSO2 ESB. Remote code execution may be obtained by writing/overwriting specific files.

Why no CVE?

The vendor replied that this vulnerability was "Fixed in WUM" and no public disclosure was made.

Requirements:

This vulnerability requires:

  • Valid user credentials

Proof Of Concept:

More details and the exploitation process can be found in this PDF.

Download Tool