CT
Vendor
cthackers
9
CVEs
0
On KEV
6
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116137 New | AD adm-zip cthackers | 3.7 | Oct 25 | adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names |
| CVE-2026-114105 | AD adm-zip cthackers | 6.2 | Oct 21 | Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits |
| CVE-2026-114104 | AD adm-zip cthackers | 5.9 | Oct 21 | adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass |
| CVE-2026-114103 | AD adm-zip cthackers | 5.3 | Oct 21 | adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync() |
| CVE-2026-114102 | AD adm-zip cthackers | 7.5 | Oct 21 | adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event |
| CVE-2026-102282 | AD adm-zip cthackers | 7.1 | Oct 5 | adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation |
| CVE-2026-77301 | AD adm-zip cthackers | 7.5 | Sep 18 | adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) |
| CVE-2026-92000 | AD adm-zip cthackers | 7.5 | Sep 15 | adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size |
| CVE-2026-76845 | AD adm-zip cthackers | 6.5 | Aug 24 | adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction |