HanTul

2 exploits Active since Nov 2025

CVE-2025-56526 NOMISEC MEDIUM WRITEUP

Cinnamon Kotaemon < 0.11.0 - XSS

Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF.

1 stars

CVSS 6.1

View Code

CVE-2025-56527 WRITEUP HIGH WRITEUP

Kotaemon 0.11.0 - Info Disclosure

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.

CVSS 7.5

View Code