GlacierCTF 2025 - Repo Viewer Revenge
Exploiting CVE-2025-62518 (TARmageddon) in Rust tokio-tar library to bypass symlink detection and extract malicious symlinks through PAX extended header desynchronization.
November 15, 2025 5 min read glacierctf cve-2025-62518 tarmageddon rust tar pax-headers symlink exploitation web 