CVE-2025-8276 HTML Injection in Patika Global Technologies' HumanSuite

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

CVE-2025-7355

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

CVE-2025-7355

CVE-2025-7355 affects Beefull App (Beefull Energy Technologies) with an authorization bypass caused by exploitation of a user-controlled key. Affected versions are prior to 24.07.2025. The vulnerability enables bypass of trusted identifiers, as described across multiple feeds (Red Hat, NVD, CVE l...

CVE-2025-7355

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

CVE-2025-7355 IDOR in Beefull Energy Technologies' Beefull App

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

CVE-2025-2404

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS. This issue affects STOYS: from 2 before 20250916...

CVE-2025-2404 XSS in Ubit Information Technologies' STOYS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS. This issue affects STOYS: from 2 before 20250916...

CVE-2025-2404 XSS in Ubit Information Technologies' STOYS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS. This issue affects STOYS: from 2 before 20250916...

CVE-2025-2404

CVE-2025-2404 : XSS in Ubit Information Technologies’ STOYS student information system. Affected versions: STOYS 2 through 20250916. Root cause: improper neutralization of input during web page generation. Impact: potential cross-site scripting exposure; no exploitation details or in-the-wild dat...

PT-2025-37991

Name of the Vulnerable Software and Affected Versions Patika Global Technologies HumanSuite versions prior to 53.21.0 Description HumanSuite contains an authorization issue related to user-controlled keys, externally controlled references to resources, and improper authorization. This allows for...

Digital Sovereignty Control Framework for Military AI-Based Cyber Security

In today's evolving threat landscape, ensuring digital sovereignty has become mandatory for military organizations, especially given their increased development and investment in AI-driven cyber security solutions. To this end, a multi-angled framework is proposed in this article in order to defi...

CVE-2025-10453 PilotGaea Technologies｜O'View MapServer - Server-Side Request Forgery

O'View MapServer developed by PilotGaea Technologies has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network...

CVE-2025-10453 PilotGaea Technologies｜O'View MapServer - Server-Side Request Forgery

O'View MapServer developed by PilotGaea Technologies has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network...

PT-2025-37454

Name of the Vulnerable Software and Affected Versions: O'View MapServer affected versions not specified Description: O'View MapServer developed by PilotGaea Technologies contains a Server-Side Request Forgery vulnerability. This allows unauthenticated remote attackers to probe internal networks...

CVE-2025-10453: Server-Side Request Forgery (SSRF)

O'View MapServer developed by PilotGaea Technologies has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network...

PT-2025-36760

Name of the Vulnerable Software and Affected Versions: LiteSpeed Cache versions n/a through 7.0.1 Description: A Server-Side Request Forgery SSRF vulnerability exists in LiteSpeed Cache. This issue allows for potentially malicious requests to be made from the server. Recommendations: Update...

[SECURITY] Fedora 41 Update: udisks2-2.10.2-1.fc41

The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. Samsung has fixed vulnerabilities relevant to Samsung Mobile in Samsung Mobile. The vulnerabilities in the Android kernel include a race condition between functions that manage CPU timers, which can lead to system instability. In addition,...

[SECURITY] Fedora 42 Update: udisks2-2.10.91-1.fc42

The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies...

WhatWeb Scanner 0.6.2

WhatWeb is a next-generation web scanner. WhatWeb recognizes web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognize something different...