PT-2026-91879

First CVE IDs are in — MITRE assigned 10 CVEs to our research CVE-2026-88557 → 88566. All 10 were found, verified end-to-end, and disclosed first by our AI-driven research pipeline. Every single one ships a full root-cause analysis and a working, reproducible PoC — public since day one, no...

EUVD-2020-28184

Malware in sbrugna...

EUVD-2020-28185

Malware in sbrugna...

CVE-2020-7050

Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is opened. Because session cookies lack the HttpOnly flag, it is possible to steal authentication cooki...

Design/Logic Flaw

Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is opened. Because session cookies lack the HttpOnly flag, it is possible to steal authentication cooki...

CVE-2020-7050

Codoforum (Codologic) up to version 4.8.4 is affected by a DOM-based XSS vulnerability. The issue arises when a normal user creates a new topic and adds a poll, which is then automatically loaded in the DOM when the thread is opened. The description notes that session cookies lack the HttpOnly fl...

CVE-2020-7050: Improper Neutralization of Input During Web Page Generation

Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is opened. Because session cookies lack the HttpOnly flag, it is possible to steal authentication cooki...

PT-2020-19358

Name of the Vulnerable Software and Affected Versions Codologic Codoforum versions 4.8.4 and earlier Description The issue allows for a DOM-based XSS attack. When creating a new topic, a user can add a poll that is automatically loaded into the DOM when the thread or topic is opened. Since sessio...

CVE-2020-7051

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover...

PT-2020-19359

Name of the Vulnerable Software and Affected Versions Codologic Codoforum versions prior to 4.8.5 Description The issue allows for stored XSS in the login area, which can lead to account takeover. This is particularly concerning because session cookies lack the HttpOnly flag. Recommendations For...

CVE-2020-7051: Improper Neutralization of Input During Web Page Generation

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover...