📦 Pwndoc

This vulnerability in PwnDoc allows authenticated users with template update/download permissions to perform path traversal attacks by injecting '../' sequences into file extension properties. This en...

CVE-2025-27410 is a path traversal vulnerability in PwnDoc's backup restore functionality that allows authenticated administrators to overwrite arbitrary files on the system. By overwriting JavaScript...

PwnDoc lacks CSRF protection, allowing attackers to perform actions on behalf of logged-in users without their consent. This affects all PwnDoc instances with default configurations where users are au...

This vulnerability in PwnDoc allows authenticated users to crash the backend server by triggering an unhandled promise rejection during audit operations. This causes the entire application to become u...