Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 36

Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00323 Published 2025-03-31 Fixed in 2.1.5 CWE-285
Priority LOW 36

Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00323 Published 2025-03-31 Fixed in 2.1.5 CWE-285
Priority LOW 31

Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JavaScript through the markdown editor feature.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00368 Published 2025-03-27 Fixed in 1.2.3 CWE-79