SCHUTZWERK

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions3
First seenSep 22, 2026
Last mentioned15d ago

Timeline

3 articles · newest first

Lobster_pro privilege escalation via request replaying

Improper permission checks let attackers call admin-only endpoints; 4.12.12-LTS and builds before 25.1.3 are cited.

Full DisclosureOct 27, 07:28 UTC · 15d agoVulnerability1

SCHUTZWERK-SA-2024-006: Stored Cross-Site Scripting via text fields in H5P module (h5p-nodejs-library) of Lumi Education

Stored XSS in Lumi Education h5p-nodejs-library before 9.3.3 runs injected script in viewers' browsers.

Full DisclosureSep 27, 04:12 UTC · Sep 27, 2026Vulnerability1

SCHUTZWERK-SA-2024-007: Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education

Stored XSS in Lumi Education h5p-nodejs-library through 10.0.4 lets uploaded H5P content run JavaScript.

Full DisclosureSep 22, 18:25 UTC · Sep 22, 2026Vulnerability1

Appears with

h5p-nodejs-libraryproduct · 2
H5Pproduct · 2
Lumi Educationvendor · 2
Lumi Educationorganization · 1
Lobster_proproduct · 1

Entities are extracted by the model from each article. First seen Sep 22, 2026, last mentioned 15d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.