Syslifters vulnerabilities
We track 4 vulnerabilities in Syslifters products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
Latest Syslifters vulnerabilities
- 8.8 High severity
SysReptor is a fully customizable pentest reporting platform.
SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shar
- 8.1 High severity
sysreptor: Reliance on Untrusted Inputs in a Security Decision
SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWED_HOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. A
- 8.1 High severity
sysreptor: Incorrect Privilege Assignment
SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged (non-admin) users can assign the is_project_admin permission to their own user. This allows users to read, modify and delet
- 8.8 High severity
sysreptor: Cross-Site Request Forgery
Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site subdomain in the same browser session.