PW
Vendor
pwndoc
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-27413 | PW pwndoc pwndoc | 4.9 | Feb 28 | PwnDoc Arbitrary File Write to RCE using Path Traversal in template update from backup templates.json |
| CVE-2025-27410 | PW pwndoc pwndoc | 6.5 | Feb 28 | PwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as admin |
| CVE-2025-23044 | PW pwndoc pwndoc | 8.1 | Jan 20 | Cross-Site Request Forgery (CSRF) allows creating admin account with POST request |
| CVE-2024-55652 | PW pwndoc pwndoc | 6.5 | Dec 11 | PwnDoc Server-Side Template Injection vulnerability - Sandbox Escape to RCE using custom filters |
| CVE-2024-55653 | PW pwndoc pwndoc | 6.5 | Dec 10 | pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS) |
| CVE-2024-55602 | PW pwndoc pwndoc | 8.5 | Dec 10 | PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal |