hustoj records
4 published records for vendor hustoj.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2026-24479Weaponized | HUSTOJ has Arbitrary File Write (Zip Slip) in Problem Import Modules that leads to RCEhustoj · hustoj · CWE-22 | Critical9.3 | — | 8.1% | Jan 26, 2026 |
24Monitor | CVE-2022-42187No exploit | Hustoj 22.09.22 has a XSS Vulnerability in /admin/problem_judge.php.hustoj · hustoj · CWE-79 | Medium6.1 | — | 0.4% | Nov 17, 2022 |
24Monitor | CVE-2025-50938No exploit | Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.hustoj · hustoj · CWE-79 | Medium6.1 | — | 0.2% | Aug 19, 2025 |
20Monitor | CVE-2026-23873No exploit | HUSTOJ is Vulnerable to Stored CSV Injection (Formula Injection) in Contest Rank Exporthustoj · hustoj · CWE-1236 | Medium5.2 | — | 0.5% | Jan 21, 2026 |
- CVE-2026-2447960This week
HUSTOJ has Arbitrary File Write (Zip Slip) in Problem Import Modules that leads to RCE
CriticalCVSS 9.3WeaponizedEPSS 8%hustoj · hustojJan 26, 2026
- CVE-2022-4218724Monitor
Hustoj 22.09.22 has a XSS Vulnerability in /admin/problem_judge.php.
MediumCVSS 6.1No exploitEPSS 0%hustoj · hustojNov 17, 2022
- CVE-2025-5093824Monitor
Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.
MediumCVSS 6.1No exploitEPSS 0%hustoj · hustojAug 19, 2025
- CVE-2026-2387320Monitor
HUSTOJ is Vulnerable to Stored CSV Injection (Formula Injection) in Contest Rank Export
MediumCVSS 5.2No exploitEPSS 0%hustoj · hustojJan 21, 2026