Skip to content
OpenAdvisories

Vendor

zhblue

2 known vulnerabilities.

Products

hustoj 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-24479 Public exploit

    HUSTOJ has Arbitrary File Write (Zip Slip) in Problem Import Modules that leads to RCE

    HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. Prior to version 26.01.24, the problem_import_qduoj.php and problem_import_hoj.php modules fail to properly sanitize filenames within uploaded ZIP archives. Att…

    zhblue hustoj