CVE-2025-65966

OneUptime is a solution for monitoring and managing online services. In version 9.0.5598, a low-permission user can create new accounts through a direct API request instead of being restricted to the intended interface. This issue has been patched in version 9.1.0...

PT-2025-48171

Name of the Vulnerable Software and Affected Versions OneUptime versions prior to 9.1.0 Description OneUptime, a service monitoring solution, allows a low-permission user to create new accounts by directly accessing an API, bypassing the intended user interface restrictions. The vulnerable API...

CVE-2025-57244

OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting XSS in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation...