Cthackers vulnerabilities
We track 4 vulnerabilities in Cthackers products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
Latest Cthackers vulnerabilities
- 7.5 High severity
adm-zip: Uncaught Exception
adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed ZIP file, because inflateAsync in methods/inflater.js lacks a zlib stream error listener. Attackers can supply a
- 7.1 High severity
adm-zip: Incorrect Permission Assignment for Critical Resource
adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via `fs.chmodSync()` when `keepOriginalPermission=true` is passed
- 7.5 High severity
adm-zip: Memory Allocation with Excessive Size Value
adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData() in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual comp
- 7.5 High severity
adm-zip: Improper Handling of Highly Compressed Data (Data Amplification)
adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives with highly compressible entries declaring zero size to exhaust memory and cause de