SY
Vendor
Syslifters
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-81181 | SY sysreptor Syslifters | 3.7 | Sep 18 | SysReptor: Session Fixation in Password-Protected Shared Notes |
| CVE-2026-81182 | SY sysreptor Syslifters | 4.2 | Sep 18 | SysReptor: Unauthorized file disclosure by broken access control in writable shared notes |
| CVE-2026-81180 | SY sysreptor Syslifters | 8.8 | Sep 18 | SysReptor: Authenticated RCE by insecure image processing |
| CVE-2026-81179 | SY sysreptor Syslifters | 8.1 | Sep 18 | SysReptor: Host header injection might allow account takeover |
| CVE-2026-81178 | SY sysreptor Syslifters | 3.5 | Sep 18 | SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity |
| CVE-2026-44987 | SY sysreptor Syslifters | 3.8 | May 8 | SysReptor: Privilege Escalation from User Admin to Superuser |
| CVE-2026-42291 | SY sysreptor Syslifters | 6.8 | May 8 | SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional |
| CVE-2025-66561 | SY sysreptor Syslifters | 5.4 | Dec 4 | SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) |
| CVE-2025-59945 | SY sysreptor Syslifters | 8.1 | Sep 27 | SysReptor Susceptible to Privilege Escalation by Authenticated Users |
| CVE-2024-36076 | SY Sysreptor Syslifters | 8.8 | May 19 | Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in… |