Browse all 4 CVE security advisories affecting pwncollege. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Pwncollege is an online platform designed for cybersecurity education, focusing on practical exploitation challenges. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, as evidenced by its four recorded CVEs. The platform's interactive nature creates attack surfaces where input validation weaknesses are commonly exploited. While no major public security incidents have been widely documented, the consistent discovery of critical vulnerabilities suggests ongoing challenges in secure development practices. The educational context of these vulnerabilities presents unique risks, as compromised instances could potentially be used to host malicious content or expose student data.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-25117 | pwn.college DOJO vulnerable to sandbox escape leading to arbitrary javascript execution — dojoCWE-20 | 7.6AI | HighAI | 2026-01-29 |
| CVE-2025-62376 | pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access — dojoCWE-287 | 9.8AI | CriticalAI | 2025-10-14 |
| CVE-2025-24885 | pwn.college has a XSS on dojo pages — dojoCWE-284 | 7.6 | High | 2025-01-30 |
| CVE-2025-24886 | pwn.college has Symlink LFI in Dojo repos — dojoCWE-61 | 7.7 | High | 2025-01-30 |
This page lists every published CVE security advisory associated with pwncollege. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.