Lucene search
+L

23 matches found

Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•28 views

PT-2026-21808

Name of the Vulnerable Software and Affected Versions bit7z versions prior to 4.0.11 Description bit7z is a cross-platform C++ static library used for archive compression and extraction. A path traversal flaw "Zip Slip" exists in the archive extraction functionality prior to version 4.0.11. The...

7.5CVSS5.5AI score0.00432EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•25 views

bit7z 安全漏洞

bit7z is a file compression/uncompression tool developed by Riccardo as an individual project. Versions of bit7z prior to 4.0.11 contained security vulnerabilities; these vulnerabilities stemmed from insufficient validation of file paths during archive extraction, which could lead to arbitrary fi...

7.5CVSS5.9AI score0.00432EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•3 views

CVE-2026-27117: Improper Limitation of a Pathname to a Restricted Directory

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.11, a path traversal vulnerability "Zip Slip" exists in bit7z's archive extraction functionality. The library does not adequately validate file paths contained in archive...

7.5CVSS6AI score0.00432EPSS
SaveExploits1References1
Rows per page
Query Builder