Skip to content
OpenAdvisories

Vendor

th30d4y

3 known vulnerabilities.

Products

OpenLearnX 2 IP 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-44720

    OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

    OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerabil…

    th30d4y OpenLearnX openlearnx npm
  • Medium 6.1
    CVE-2026-41575 Public exploit

    th30d4y/IP: DOM-Based Cross-Site Scripting (XSS) Vulnerability

    In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized user input was directly rendered in the browser, allowing attackers to execute a…

    th30d4y IP