CVE-2025-11030: Improper Authorization

A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60. Impacted is an unknown function of the file /admin/all-applied-leave.php of the component HTTP Request Handler. The manipulation results in improper authorization. The atta...

PT-2025-39677

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A security flaw exists in code-projects E-Commerce Website 1.0. The issue involves the manipulation of the Search argument in the file /pages/admin index search.php, leading to a SQL...

PT-2025-39645

Name of the Vulnerable Software and Affected Versions Webbeyaz Website Design Website Software versions through 2025.07.14 Description A flaw exists in Webbeyaz Website Design Website Software that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during w...

Webbeyaz Website Software 跨站脚本漏洞

Webbeyaz Website Software is a platform for building websites from the Turkish company Webbeyaz. A cross-site scripting vulnerability exists in Webbeyaz Website Software version 2025.07.14 and earlier, which stems from improper input neutralization during web page generation and could lead to...

CVE-2025-11036: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/adminaccountupdate.php. Such manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be...

Code-Projects E-Commerce Website SQL注入漏洞

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter userid in the file /pages/adminaccountupdate.php. An attacker can exploit this vulnerabili...

Linux Distros Unpatched Vulnerability : CVE-2025-43356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - webkit2gtk - The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and...

The vulnerability in the virtual learning environment Moodle, related to the lack of security measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability of the FosWiki platform, related to the lack of measures taken to protect the website structure, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the FosWiki platform lies in the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

SUSE CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent...

CVE-2025-58666

Missing Authorization vulnerability in Kommo Website Chat Button: Kommo integration website-chat-button-kommo-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Website Chat Button: Kommo integration: from n/a through = 1.3.1...

CVE-2025-10793

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/adminaccountdelete.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The...

The vulnerability of the JEvents component of the Joomla! content management system allows a hacker to execute arbitrary code.

The vulnerability of the JEvents component in the Joomla! content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the tools for collaborative work and content management in ENOVIA Collaborative Industry Innovator lies in the lack of measures to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the tools for collaborative work and content management in ENOVIA Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site...

The vulnerability of the SolarWinds Serv-U File Server file server, related to the lack of protective measures for the website structure, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the SolarWinds Serv-U File Server file server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Items Management Service component of the software solution for designing and optimizing service processes, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Items Management Service component of the software solution for designing and optimizing service processes, Service Process Engineer, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform...

The vulnerability of the software for managing Product Managers, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Product Manager’s software management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of collaborative tool sets for content management and collaboration, as described in the Collaborative Industry Innovator, arises from the lack of measures to protect website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the collaborative toolset for content collaboration and management in Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform...

The vulnerability of collaborative tool sets for content management and collaboration, as described in the Collaborative Industry Innovator, arises from the lack of measures to protect website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the collaborative toolset for content collaboration and management in Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform...