Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

cthackers vulnerabilities

9 published CVEs name cthackers among the affected products.

Newest CVEs

  • CVE-2026-116137

    adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names

    cthackers · adm-zip

    Medium6.3
  • CVE-2026-114105

    Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits

    cthackers · adm-zip

    Medium6.9
  • CVE-2026-114104

    adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass

    cthackers · adm-zip

    High8.2
  • CVE-2026-114103

    adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync()

    cthackers · adm-zip

    Medium6.9
  • CVE-2026-114102

    adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event

    cthackers · adm-zip

    High8.7
  • CVE-2026-102282

    adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation

    cthackers · adm-zip

    High7.1
  • CVE-2026-77301

    adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

    cthackers · adm-zip

    High7.5
  • CVE-2026-92000

    adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size

    cthackers · adm-zip

    High8.7
  • CVE-2026-76845

    adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction

    cthackers · adm-zip

    Medium6.8