Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-0851 — Proof-of-concept exploit for CVE-2025-0851, a file traversal vulnerability in Deep Java Library's tar/zip model extraction utility, enabling arbitrary file write on Windows systems. | Kitploit
Tools/GitHubGitHub/skrkcb2/cve-2025-0851
Vulnerability AnalysisExploitationWeb Application ExploitationFuzzingPenetration TestingBinary Analysis
GitHubskrkcb2/cve-2025-0851

CVE-2025-0851

Proof-of-concept exploit for CVE-2025-0851, a file traversal vulnerability in Deep Java Library's tar/zip model extraction utility, enabling arbitrary file write on Windows systems.

View Repository
1131 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-0851

This vulnerability occurs in the Deep Java Library (an open-source framework for Java deep learning) when providing utilities for extracting tar and zip model archives used for loading models. A File Traversal vulnerability arises in the untar and unzip functions.

Details: When creating an archive on a Linux system and extracting it on a Windows system, artifacts may be written outside the intended target directory that the extraction process is concerned with. The opposite is also applicable.

Test method: Place the two files test.jar and tar in the C:/ path and execute via cmd (administrator rights) (java -jar test.jar / java version: 17.0.9) -> Execution result creates a TEST file at C:\Windows\System32\config\TEST

20250217_191015 (1)

Brief explanation:

dest.resolve(name).toAbsolutePath(); In the statement, when .toAbsolutePath() specifies an absolute path in name, it ignores dest.resolve(name) and =>
returns only name(C:\Windows\System32\config\TEST) =>
When creating a folder on Linux, it is possible to input \ in the folder name, so a folder named C:\Windows\System32\config\ is created and then the TEST file is created, tar archive or Zip

Update details:

update

Download Tool