Vulnerabilities

TI-2026-20280 CVE-2026-25117

pwn.college DOJO vulnerable to sandbox escape leading to arbitrary javascript execution

LOW 37

pwn.college DOJO is an education platform for learning cybersecurity.

CVSS 4.0HIGH 8.3 Network No auth User interaction EPSS 0.00573 Published 2026-01-29 No fix listed CWE-20

TI-2025-38644 CVE-2025-62376

HIGH 76

pwn.college DOJO is an education platform for learning cybersecurity.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00466 Published 2025-10-14 Fixed in 467db0b CWE-287

TI-2025-18587 CVE-2025-24885

HIGH 66

pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00245 Published 2025-01-30 No fix listed CWE-284

TI-2025-18588 CVE-2025-24886

HIGH 67

pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00479 Published 2025-01-30 No fix listed CWE-200