CVE-2025-0419 XSS in Mikrogrup's Zirve Nova

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting XSS. This issue affects Zirve Nova: from 235 through 20250131...

CVE-2025-0419 XSS in Mikrogrup's Zirve Nova

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting XSS. This issue affects Zirve Nova: from 235 through 20250131...

CVE-2025-0419

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting XSS. This issue affects Zirve Nova: from 235 through 20250131...

Shopside App 跨站脚本漏洞

Shopside App is a shopping application from the Turkish company Shopside. A cross-site scripting vulnerability exists in Shopside App versions prior to 17.02.2025, which stems from improper input neutralization during web page generation and could lead to cross-site scripting attacks...

PT-2025-38132

Name of the Vulnerable Software and Affected Versions: Paraşüt versions 0.0.0.65efa44e through 20250204 Description: Paraşüt software contains a flaw due to improper neutralization of input during web page generation, which allows for Cross-Site Scripting XSS. XSS occurs when an application...

MevzuatTR 安全漏洞

MevzuatTR is an online platform for retrieval and notification of judicial decisions in Turkey by MevzuatTR Turkey. A security vulnerability exists in MevzuatTR versions prior to 12.02.2025 that stems from improper input neutralization and improper UI layer or frame restriction, which could lead ...

Dokuzsoft E-Commerce Web Design Product 跨站脚本漏洞

Dokuzsoft E-Commerce Web Design Product is an e-commerce platform website design software from Dokuzsoft Turkey. A cross-site scripting vulnerability exists in Dokuzsoft E-Commerce Web Design Product versions prior to 11.08.2025, which stems from improper input neutralization and could lead to...

Zirve Nova 跨站脚本漏洞

Zirve Nova is an accounting and financial management software from the Turkish company Zirve Nova. A cross-site scripting vulnerability exists in Zirve Nova versions 235 through 20250131, which stems from improper input neutralization during web page generation and could lead to cross-site...

CVE-2025-8276

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

Improper Input Validation

github.com/mattermost/mattermost-servert is vulnerable to Improper Input Validation. The vulnerability is due to failure to sanitize the team invite ID in the /api/v4/teams/:teamId/restore endpoint, which allows a team admin without invite privileges to obtain the team’s invite ID...

CVE-2025-6575

CVE-2025-6575 is a reflected XSS in Dolusoft Omaspot caused by improper input neutralization during web page generation. Affected versions are prior to 12.09.2025. Attack vector is network with user interaction required for exploitation; impact is partial confidentiality and integrity concerns as...

CVE-2025-2404

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS. This issue affects STOYS: from 2 before 20250916...

CVE-2025-2404 XSS in Ubit Information Technologies' STOYS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS. This issue affects STOYS: from 2 before 20250916...

PHPGurukul Auto Taxi Stand Management System 安全漏洞

PHPGurukul Auto Taxi Stand Management System is an auto cab stand management system from PHPGurukul. A security vulnerability exists in the PHPGurukul Auto Taxi Stand Management System that stems from not properly cleaning up user input and could lead to a cross-site scripting attack...

Amazon Linux 2 : pki-core, --advisory ALAS2-2025-2995 (ALAS-2025-2995)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2995 advisory. Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows Cross-Site Scripting XSS.This issue affects Bootstrap: from 3.4.1 before 4.0.0...

Azora Wireless Network Management SQL注入漏洞

Azora Wireless Network Management is a wireless network management platform from Azora Turkey. An SQL injection vulnerability exists in Azora Wireless Network Management 20250916 and prior versions, which stems from improper neutralization of special elements and could lead to an SQL injection...

PT-2025-37982

Name of the Vulnerable Software and Affected Versions: Workcube ERP versions V12 through V14 through 20250916 Description: Workcube ERP is susceptible to a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Workcube ERP...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input when handling InternetDomainName values. An attacker can access cookies set by the application across subdomains by controlling a website that shares the same top-level domain...

CVE-2024-45431

OpenSynergy BlueSDK aka Blue SDK through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID CID. An attacker can leverage this to create an L2CAP channel with the null...

CVE-2024-45431

OpenSynergy BlueSDK aka Blue SDK through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID CID. An attacker can leverage this to create an L2CAP channel with the null...