ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

10 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: prasklatechnology ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2026-25814
+8 in the same advisory: …25875 …25812 …25813 …25809 …25811 …25876 +2
PlaciPy is a placement management system designed for educational institutions.

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query parameters are passed directly into DynamoDB query/filter construction without validation or sanitization.

NVD description · AI analysis pending		9.3
group max
<1%
  • prasklatechnology placipy
—
CVE-2026-25753
PlaciPy is a placement management system designed for educational institutions.

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a hard-coded, static default password for all newly created student accounts. This results in mass account takeover, allowing any attacker to log in as any student once the password is known.

NVD description · AI analysis pending		9.3<1%
  • prasklatechnology placipy
—