CVE-2020-37022 OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules...

CVE-2020-37022

CVE-2020-37022 refers to OpenZ ERP 3.6.60 with a persistent cross-site scripting vulnerability in the Employee module’s name and description fields. Attacks can inject scripts via POST flows that target these parameters, enabling session hijacking and manipulation of application modules. The conn...

CVE-2025-7014

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking.This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

PT-2026-5417

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules...

CVE-2025-7014

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking.This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-7014

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-7014

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-7014 Session Hijacking in QRMenumPro's Menu Panel

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-7014 Session Hijacking in QRMenumPro's Menu Panel

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

EUVD-2025-206544

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking.This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-7014

Summary: CVE-2025-7014 describes a Session Fixation vulnerability in QR Menu Pro Smart Menu Systems’ Menu Panel, allowing Session Hijacking. Affects the Menu Panel up to version tied to the date 29012026 (presumably before that date). Multiple sources (NVD, Red Hat, CVE list, EUVD, ATT&CK referen...

CVE-2025-7015 Session Hijacking in Akinsoft's QR Menu

Session Fixation vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Session Fixation. This issue affects QR Menu: before s1.05.12...

CVE-2025-7015

CVE-2025-7015 is described as a Session Fixation vulnerability affecting the QR Menu feature of Akın Software Computer Import Export Industry and Trade Ltd., with impact stated for versions prior to s1.05.12. The connected sources generally indicate this flaw in the QR Menu component but do not p...

CVE-2025-7015 Session Hijacking in Akinsoft's QR Menu

Session Fixation vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Session Fixation. This issue affects QR Menu: before s1.05.12...

PT-2026-5267

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking.This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

AKINSOFT QRMenu Authorization Issue Vulnerability

AKINSOFT QRMenu is a digital menu system developed by the Turkish company AKINSOFT. Versions of AKINSOFT QRMenu prior to s1.05.12 contained vulnerabilities related to authorization issues. These vulnerabilities were caused by session fixation attacks, which could lead to session hijacking attempt...

QRMenümPro Menu Panel Authorization Issue Vulnerability

QRMenümPro Menu Panel is a backend management panel for the intelligent menu system developed by the Turkish company QRMenümPro. The QRMenümPro Menu Panel versions dated 29012026 and earlier had an authorization issue vulnerability. This vulnerability stemmed from session fixation, which could le...

CVE-2026-24490

MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The...

CVE-2025-69602

A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifier after successful authentication. As a result, the same session cookie value is reused for users logging in from the same browser, allowing an attacker who c...

Podman Desktop Authorization Issue Vulnerability

Podman Desktop is an open-source container management tool developed by podman-desktop. Versions of Podman Desktop prior to 1.25.1 contained an authorization vulnerability. This vulnerability stemmed from the isAccessAllowed function returning true unconditionally, which could lead to...