itwanger records
5 published records for vendor itwanger.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-266 Incorrect Privilege Assignment1
- CWE-346 Origin Validation Error1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2025-3966No exploit | itwanger paicoding Browsing History home information disclosureitwanger · paicoding · CWE-200 | Medium5.3 | — | 0.5% | Apr 27, 2025 |
21Monitor | CVE-2025-3967No exploit | itwanger paicoding Article post improper authorizationitwanger · paicoding · CWE-266 | Medium5.3 | — | 0.5% | Apr 27, 2025 |
20Monitor | CVE-2025-3965No exploit | itwanger paicoding post cross site scriptingitwanger · paicoding · CWE-79 | Medium5.1 | — | 0.4% | Apr 27, 2025 |
9Monitor | CVE-2025-4839No exploit | itwanger paicoding CrossUtil.java cross-domain policyitwanger · paicoding · CWE-346 | Low2.3 | — | 0.3% | May 17, 2025 |
8Monitor | CVE-2026-3286No exploit | itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgeryitwanger · paicoding · CWE-918 | Low2.1 | — | 0.4% | Feb 27, 2026 |
- CVE-2025-396621Monitor
itwanger paicoding Browsing History home information disclosure
MediumCVSS 5.3No exploitEPSS 1%itwanger · paicodingApr 27, 2025
- CVE-2025-396721Monitor
itwanger paicoding Article post improper authorization
MediumCVSS 5.3No exploitEPSS 0%itwanger · paicodingApr 27, 2025
- CVE-2025-396520Monitor
itwanger paicoding post cross site scripting
MediumCVSS 5.1No exploitEPSS 0%itwanger · paicodingApr 27, 2025
- CVE-2025-48399Monitor
itwanger paicoding CrossUtil.java cross-domain policy
LowCVSS 2.3No exploitEPSS 0%itwanger · paicodingMay 17, 2025
- CVE-2026-32868Monitor
itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery
LowCVSS 2.1No exploitEPSS 0%itwanger · paicodingFeb 27, 2026