Skip to main content

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/tecnickcom/tcexam

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

0

CVE-2026-4169 is a cross-site scripting (XSS) vulnerability found in Tecnick TCExam versions up to 16.6.0, specifically in the XML export functionality for users. The flaw exists in the F_xml_export_users function within admin/code/tce_xml_users.php. Exploitation requires an attacker to have administrator privileges to both create and trigger the exploit, limiting its practical impact. The vulnerability allows injection of malicious scripts that could be executed in the context of an administrator's browser session. The vendor has released version 16.6.1 to address this issue.

Join the discussion
0

CVE-2026-4168 is a medium severity cross-site scripting (XSS) vulnerability found in Tecnick TCExam version 16.5.0, specifically in the /admin/code/tce_edit_group.php file within the Group Handler component. The vulnerability arises from improper sanitization of the 'Name' argument, allowing remote attackers to inject malicious scripts. Exploitation requires high privileges and user interaction, and no authentication bypass is indicated. Although a public exploit exists, the vendor has indicated that the issue could not be reproduced in later versions, suggesting it has been fixed. Organizations using TCExam 16.5.0 or earlier should upgrade to the latest version to mitigate risk.

Join the discussion

Showing 1 to 2 of 2 results

Filters:Package: pkg:github/tecnickcom/tcexam
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses