📦 Hustoj

This vulnerability allows attackers to achieve remote code execution by uploading malicious ZIP archives containing path traversal sequences. The flaw affects HUSTOJ online judge systems running versi...

CVE-2026-23873 is a CSV injection vulnerability in hustoj's contest rank export functionality that allows attackers to embed Excel formulas in nickname fields. When administrators export and open thes...

This CVE describes a cross-site scripting (XSS) vulnerability in Hustoj, an online judge system, affecting the thread.php page via the TID parameter. Attackers can inject malicious scripts that execut...