Pwndoc Project vulnerabilities

Products

• Pwndoc 9

Newest

• pwndoc PwnDoc Arbitrary File Write to RCE using Path Traversal in template update from backup templates.json CVE-2025-27413 6.5 MediumFebruary 28, 2025
• pwndoc PwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as admin CVE-2025-27410 Public exploit 6.5 MediumFebruary 28, 2025
• pwndoc Cross-Site Request Forgery (CSRF) allows creating admin account with POST request CVE-2025-23044 6.8 MediumJanuary 20, 2025
• pwndoc pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS) CVE-2024-55653 6.5 MediumDecember 10, 2024
• pwndoc PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal CVE-2024-55602 7.6 HighDecember 10, 2024
• pwndoc project pwndoc An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges... CVE-2022-45771 Public exploit 8.8 HighDecember 5, 2022
• pwndoc project pwndoc PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by... CVE-2022-44023 5.3 MediumOctober 29, 2022
• pwndoc project pwndoc PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by... CVE-2022-44022 5.3 MediumOctober 29, 2022
• pwndoc project pwndoc PwnDoc through 2021-04-22 has incorrect JSON Webtoken handling, leading to incorrect access... CVE-2021-31590 8.8 HighJuly 19, 2021