CVE-2025-66303

creationtimestamp| type| source ---|---|--- 2025-12-01 20:42:17+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-x62q-p736-3997 2025-12-01 22:46:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xiz7ugc72j...

CVE-2025-13835

creationtimestamp| type| source ---|---|--- 2025-12-01 19:14:31+00:00| seen| https://gist.github.com/Darkcrai86/31da6f27509e3815434dae781a90d0e9...

CVE-2025-65405

creationtimestamp| type| source ---|---|--- 2025-12-01 17:13:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645428301148412 2025-12-01 18:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6x2oeulp42q...

CVE-2025-11699

creationtimestamp| type| source ---|---|--- 2025-12-01 15:43:25+00:00| seen| https://gist.github.com/Darkcrai86/98d1b607a99ab2ded56599ac67a379d0 2025-12-02 04:34:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6y4ikhffj2s...

CVE-2025-55222

creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:56+00:00| seen| https://infosec.place/objects/b07c452b-428c-48af-a490-215c0e255962...

CVE-2024-49572

creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:22+00:00| seen| https://infosec.place/objects/c22ffb7b-d370-4185-b12a-8e92088603d6...

CVE-2025-13296 CSRF in Tekrom Technology's T-Soft E-Commerce

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

CVE-2025-13809

creationtimestamp| type| source ---|---|--- 2025-12-01 06:04:16+00:00| seen| https://infosec.exchange/users/offseq/statuses/115642797535662438...

CVE-2025-13716

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1032/...

CVE-2025-13706

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1034/...

CVE-2025-13708

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1033/...

CVE-2025-13802

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

CVE-2025-13796

creationtimestamp| type| source ---|---|--- 2025-12-01 03:00:07+00:00| published-proof-of-concept| Telegram/q7VD5LFLz0DQI0He0CdIi8UKDEAJAk3zBKou56yKpQVq99g...

CVE-2025-13802 jairiidriss RestaurantWebsite Make a Reservation cross site scripting

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

EUVD-2025-199948

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

CVE-2025-13802 jairiidriss RestaurantWebsite Make a Reservation cross site scripting

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

PT-2025-48447

Name of the Vulnerable Software and Affected Versions Onaylarım versions 25.09.26.01 through 18112025 Description An improper enforcement of behavioral workflow issue exists in Onaylarım. This allows for functionality misuse. Recommendations Update Onaylarım to a version later than 18112025...

PT-2025-48406

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selected date causes cross site scripting. The attack can be initiated remotely. T...

Android Security Bulletin—December 2025Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2025-12-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Within 48 hours afte...

RestaurantWebsite 代码注入漏洞

RestaurantWebsite is an online food ordering and table reservation system by the individual developer Idriss JAIRI. RestaurantWebsite suffers from a code injection vulnerability that stems from the incorrect operation of the parameter selecteddate in the component Make a Reservation, which could...