Vendor archive

syslifters CVEs

Beta · best-effort

3 CVEs tagged to vendor syslifters — 0 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2025-66561

Published Dec 4, 2025

SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated users to execute m…

CVSS 7.3 · High

Vendor/product tagsBeta · best-effort

CVE-2025-59945

Published Sep 27, 2025

SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged (non-admin) users can assign the is_projec…

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2024-36076

Published May 19, 2024

Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysRe…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1