743 matches found
POC-CVE-2026-102282
CVE-2026-102282 — adm-zip 在解压过程中保留 setuid/setgid npm 包 adm-zip 中存在不正确的权限分配。当启用 keepOriginalPermission 时，解压过程会保留来自不可信 zip 的 setuid、setgid 和 sticky 位，从而允许从攻击者提供的归档文件中将一个 root 所有的 setuid 可执行文件植入磁盘：本地权限提升 。 | ---|--- 包| adm-zip npm 生态系统| Node.js CVE| CVE-2026-102282 公告| GHSA-j5f4-cc29-5x44 CWE| CWE-7...
adm-zip_LPE-PoC
CVE-2026-102282：adm-zip 通过 SUID 保留导致的本地权限提升 描述 adm-zip 是一个成熟的、纯 JavaScript 编写的 Node.js ZIP 归档库，在 npm 生态系统中每周下载量超过 2000 万次。它被广泛集成到 CI/CD 流水线、容器构建工作流、云部署工具和服务端应用程序中，用于处理归档压缩和解压。 在解压过程中，adm-zip 支持一个 keepOriginalPermission 配置选项，旨在恢复归档中记录的 POSIX 权限。然而，该库未能过滤掉带有特殊权限的 Unix...
CVE-2026-6643
CVE-2026-6643 — ASUSTOR ADM 5.1.2 RCE vpnupload.cgi におけるフォーマット文字列（CWE-134）＋スタックバッファオーバーフロー（CWE-121） 脆弱性概要 項目| 値 ---|--- 製品| ASUSTOR ADM（ASUSTOR Data Master） 影響を受けるバージョン| ADM 5.1.2.REO1（X64G3、2026-02-25） コンポーネント| /portal/apis/settings/vpnupload.cgi — uploadwireguard アクション 脆弱性タイプ| CWE-134 フォーマット文字列...
ROOT-APP-NPM-CVE-2026-77301 CVE-2026-77301 in adm-zip - Patched by Root
Root has patched CVE-2026-77301 in the adm-zip package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-39244 CVE-2026-39244 in adm-zip - Patched by Root
Root has patched CVE-2026-39244 in the adm-zip package for Root:npm. Multiple fixed versions available...
adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)
Summary Denial of Service in adm-zip's async decompression API allows an unauthenticated attacker to crash the entire Node.js host process by supplying a single malformed ZIP file. Details Affected package: adm-zip Affected versions: at least 0.6.0 current latest; likely all versions containing t...
CLSA-2026-1790718594 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.4...
adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0
Affected package: adm-zip npm Affected version: 0.6.0 Summary The fix shipped for CVE-2026-39244 methods/inflater.js caps zlib's decompression output via maxOutputLength: expectedLength, where expectedLength is read directly from the ZIP entry's attacker-controlled "uncompressed size" header fiel...
NPM: adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0
NPM: adm-zip: Decompression-bomb protection fix for CVE-2026-39244 can be bypassed by declaring uncompressed size as 0 vulnerability discovered by ? in WordPress Npm adm-zip versions = 0.6.0...
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
Summary adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via fs.chmodSync when keepOriginalPermission=true is passed to extractAllTo/extractEntryTo — and it never filters the setuid/setgid/sticky bits out of those bits. A zip crafted by an attacker can...
NPM: adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
NPM: adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs - local privilege escalation vulnerability discovered by ? in WordPress Npm adm-zip versions = 0.6.0...
PT-2026-102974
Name of the Vulnerable Software and Affected Versions adm-zip version 0.6.0 Description An issue exists where the software applies Unix permission bits from a zip entry directly to an extracted file using the fs.chmodSync function when the keepOriginalPermission flag is set to true in the...
CLSA-2026-1790457506 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.3...
CLSA-2026-1790180021 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.16-tuxcare.2...
CLSA-2026-1790176614 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.10-tuxcare.1...
CLSA-2026-1790166345 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.2...
CLSA-2026-1790165044 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.12-tuxcare.1...
CLSA-2026-1790162696 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.16-tuxcare.1...