CVE-2026-16027 Unauthenticated WebSocket-to-XAdES SSRF in Revenue Administration's E-Signature

Server-Side request forgery SSRF vulnerability in Revenue Administration Türkiye's E-Signature allows Server Side Request Forgery. This issue affects Türkiye's E-Signature: from 2.4.4.0 before 2.5.1.0...

PT-2026-63422

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.3.1.0 through 20260722. NOTE: The vendor was contacted early about this...

CVE-2026-2395: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4...

PT-2026-42475

Name of the Vulnerable Software and Affected Versions Turkiye Electricity Transmission Corporation TEİAŞ Mobile Application versions 1.6.2 through 1.12 Description Improper restriction of excessive authentication attempts allows for Brute Force attacks, which can lead to an OTP One-Time Password...

CVE-2025-6830: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Xpoda Türkiye Information Technology Inc. Password Module allows SQL Injection. This issue affects Password Module: through 11022026...

Türkiye Hackers Exploited Output Messenger Zero-Day to Drop Golang Backdoors on Kurdish Servers

A Türkiye-affiliated threat actor exploited a zero-day security flaw in an Indian enterprise communication platform called Output Messenger as part of a cyber espionage attack campaign since April 2024. "These exploits have resulted in a collection of related user data from targets in Iraq," the...

Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies

Telecommunication, media, internet service providers ISPs, information technology IT-service providers, and Kurdish websites in the Netherlands have been targeted as part of a new cyber espionage campaign undertaken by a Türkiye-nexus threat actor known as Sea Turtle. "The infrastructure of the...

December 12, 2023—KB5033371 (OS Build 17763.5206) - EXPIRED

None None...

Dance Hero Türkiye - Base64 encoded String, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Dance Hero Türkiye published at the 'play' market has multiple vulnerabilities...

Türkiye Texas Poker - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Türkiye Texas Poker published at the 'play' market has multiple vulnerabilities...

FOX TV Türkiye - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application FOX TV Türkiye published at the 'play' market has multiple vulnerabilities...

Big Brother Türkiye - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Big Brother Türkiye published at the 'play' market has multiple vulnerabilities...

phpMyDirectory.com v1.3.3 SQL Injection

Exploit for php platform in category web applications Exploit Title: phpMyDirectory.com v. 1.3.3 SQL Injection Google Dork: phpMyDirectory.com v. 1.3.3 Location : Türkiye Date: 08/01/2012 Version: v. 1.3.3 Author: Serseri | www.imhatimi.org | Biri Bizimi Çaðýrdý J Software Link:...

phpMyDirectory.com 1.3.3 - SQL Injection

phpMyDirectory.com 1.3.3 - SQL Injection Exploit Title: phpMyDirectory.com v. 1.3.3 SQL Injection Google Dork: phpMyDirectory.com v. 1.3.3 Location : Türkiye Date: 08/01/20112 Version: v. 1.3.3 Author: Serseri | www.imhatimi.org | Biri Bizimi Çaðýrdý J Software Link: http://www.phpmydirectory.com...

phpMyDirectory.com 1.3.3 - SQL Injection

Exploit Title: phpMyDirectory.com v. 1.3.3 SQL Injection Google Dork: phpMyDirectory.com v. 1.3.3 Location : Türkiye Date: 08/01/20112 Version: v. 1.3.3 Author: Serseri | www.imhatimi.org | Biri Bizimi Çaðýrdý J Software Link: http://www.phpmydirectory.com/ Exploit...

Stadtaus Voting 1.9.1 Remote File Inclusion

Dr4cula.Us Stadtaus Voting v1.9.1 Remote File Include Vulnerability Download Script : http://scripti.org/scriptstadtaus-anket-scripti19016.html Author : Dracula Contact : [email protected] Location : Türkiye Blog : http://dr4cula.us Dork : Stadtaus voting File : index.php include $scriptroot...

Cuteflow Bin 1.5.0 (login.php) Local File Inclusion Vulnerability

No description provided by source. Cuteflow Bin v1.5.0 Local File Inclusion Vulnerability + Author : KnocKout + Cyber-Warrior.org / Bug Researchers Group Special Thanks : CW ALL USERS / Mr.Freeman ============================================== Script : Cuteflow Bin v1.5.0 Download :...