Advisories · Technology

pwncollege dojo.

Every CVE that names pwncollege dojo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-25117 CVE record

CVSS 8.3 High

pwn.college DOJO vulnerable to sandbox escape leading to arbitrary javascript execution
- pwncollege dojo
- Cross-site scripting (XSS)
- CWE-20
Not analysed yet 29 Jan 2026
CVE-2025-62376 CVE record

CVSS 9.5 CriticalCritical · CVSS 9+

pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access
- pwncollege dojo
- Authentication bypass
Not analysed yet 14 Oct 2025
CVE-2025-24885 CVE record

CVSS 7.6 High

pwn.college has a XSS on dojo pages
- pwncollege dojo
- Cross-site scripting (XSS)
- Broken access control
Not analysed yet 30 Jan 2025
CVE-2025-24886 CVE record

CVSS 7.7 High

pwn.college has Symlink LFI in Dojo repos
- pwncollege dojo
- Information disclosure
- CWE-61
Not analysed yet 30 Jan 2025