CVE-2025-6396 XSS in Webbeyaz's web site

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting XSS. This issue affects Website Software: through 2025.07.14...

CVE-2025-6396: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting XSS. This issue affects Website Software: through 2025.07.14...

PT-2025-39599

Name of the Vulnerable Software and Affected Versions WP Ticket Customer Service Software & Support Ticket System versions through 6.0.2 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Stored Cross-site...

PT-2025-39645

Name of the Vulnerable Software and Affected Versions Webbeyaz Website Design Website Software versions through 2025.07.14 Description A flaw exists in Webbeyaz Website Design Website Software that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during w...

CVE-2025-58915

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in emarket-design Request a Quote request-a-quote allows Stored XSS.This issue affects Request a Quote: from n/a through = 2.5.0...

CVE-2025-0663

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to errors during initialization of variables, allowing an intruder to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of software for modeling, design, and drawing in AutoCAD is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code by sending a specially created DGN...

The vulnerability of the Items Management Service component of the software solution for designing and optimizing service processes, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Items Management Service component of the software solution for designing and optimizing service processes, Service Process Engineer, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created DGN file...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to reading beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of software for modeling, design, and drawing in AutoCAD is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code by sending a specially created DGN...

MAL-2025-47578 Malicious code in altoqitec-design-system-react (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in altoqitec-design-system-react (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-58915

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in emarket-design Request a Quote request-a-quote allows Stored XSS.This issue affects Request a Quote: from n/a through = 2.5.0...

CVE-2025-58915

CVE-2025-58915 affects multiple WordPress plugins from eMarket Design including YouTube Showcase . The vulnerability is an Authenticated Stored Cross-Site Scripting (XSS) issue in input handling during web page generation. The Wordfence report lists this as stored XSS with an attack surface invol...

WSO2 Identity Server 安全漏洞

WSO2 Identity Server IS is an identity server from the US-based WSO2 Inc. A security vulnerability exists in WSO2 Identity Server IS that stems from improper cryptographic design in adaptive authentication, which could lead to a cross-tenant authentication vulnerability...

PT-2025-39107

Name of the Vulnerable Software and Affected Versions Emarket-design YouTube Showcase versions through 3.5.0 Description The software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting XSS issue. Specifically, the vulnerability allows...

CVE-2025-58915: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in emarket-design Request a Quote request-a-quote allows Stored XSS.This issue affects Request a Quote: from n/a through = 2.5.0...

CVE-2025-59589

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: from n/a through = 8.6.8...

CVE-2025-59588

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PenciDesign Soledad soledad allows PHP Local File Inclusion.This issue affects Soledad: from n/a through = 8.6.8...

CVE-2025-59583 WordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Penci Filter Everything penci-filter-everything allows DOM-Based XSS.This issue affects Penci Filter Everything: from n/a through 1.7...