EUVD-2025-52267

Malicious code in ridiculous-sapphire-turkey npm...

Malicious code in annoyed-cyan-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab45f746cb633eefebe146b8517370ab3372659347ea5e6205571f12952e447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69883 Malicious code in petite-lavender-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d79c0be524a5bc3221a4fc28d437c9c950cdba43e4a411b9a636106118557c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60205

Malicious code in determinedturkeyz3n npm...

CB Project CVLand 安全漏洞

CB Project CVLand is a recruitment mobile application from CB Project Turkey. A security vulnerability exists in CB Project CVLand versions 2.1.0 through 20251103, which stems from a user-controllable key leading to an authorization bypass that could lead to a parameter injection attack...

CBK Soft EnVision 安全漏洞

CBK Soft EnVision is an enterprise document management system from CBK Soft, Turkey. A security vulnerability exists in versions prior to CBK Soft EnVision 250566 that stems from observable differences and exposure of sensitive information that could lead to account footprint identification...

SFS Winsure SQL注入漏洞

SFS Winsure is an insurance solution suite from SFS Turkey. SFS Winsure versions 21.08.2025 and earlier suffer from a SQL injection vulnerability that stems from improper neutralization of special elements, which could lead to a blind SQL injection attack...

Logo Cloud 跨站脚本漏洞

Logo Cloud is a series of cloud-based services and products from Logo Turkey. A cross-site scripting vulnerability exists in Logo Cloud versions prior to 1.18 that stems from improper input neutralization and could lead to a cross-site scripting attack...

Logo Cloud 安全漏洞

Logo Cloud is a series of cloud-based services and products from Logo Turkey. A security vulnerability exists in Logo Cloud versions prior to 0.67, which stems from a user-controllable key leading to an authorization bypass that could lead to forced browsing and resource disclosure...

MevzuatTR 安全漏洞

MevzuatTR is an online platform for retrieval and notification of judicial decisions in Turkey by MevzuatTR Turkey. A security vulnerability exists in MevzuatTR versions prior to 12.02.2025 that stems from improper input neutralization and improper UI layer or frame restriction, which could lead ...

Beefull App 安全漏洞

Beefull App is a shared energy network application from Beefull Turkey. A security vulnerability exists in Beefull App versions prior to 24.07.2025, which stems from a user-controllable key leading to an authorization bypass that could exploit trusted identifiers...

Akinsoft TaskPano 安全漏洞

Akinsoft TaskPano is a team task and project management platform from Akinsoft Turkey. A security vulnerability exists in Akinsoft TaskPano versions prior to s1.06.06, which stems from an improperly restricted authentication attempt that could lead to authentication bypass...

Unspecified Vulnerability in Akinsoft QR Menü

Akinsoft QR Menü is a digitized QR code menu system from Akinsoft Turkey. Akinsoft QR Menü s versions prior to 1.05.05 to v1.05.12 contain a security vulnerability that originates from improper certificate validation, which can be exploited by an attacker to cause HTTP response splitting...

LimonDesk 安全漏洞

LimonDesk is a real-time chat, work order ticketing, and other features from LimonDesk Turkey. A security vulnerability exists in LimonDesk s1.02.14 through versions prior to v1.ylabel17, which stems from an improperly restricted rendering UI layer or frame, which could lead to iframe overrides a...

Akınsoft QR Menü 跨站脚本漏洞

Akinsoft QR Menü is a digitized QR code menu system from Akinsoft Turkey. Cross-site scripting vulnerability exists in Akinsoft QR Menü s versions prior to 1.05.05 to v1.05.12, no detailed vulnerability details are available at this time...

Kron PAM 安全漏洞

Kron PAM is a privileged access management platform from Kron Turkey. A security vulnerability exists in Kron PAM that stems from unrestricted resource allocation or throttling, which could lead to an HTTP denial of service...

Kron PAM 跨站脚本漏洞

Kron PAM is a privileged access management platform from Kron Turkey. A cross-site scripting vulnerability exists in Kron PAM that stems from improper input neutralization and could lead to stored cross-site scripting...

HotelRunner B2B 安全漏洞

HotelRunner B2B is a software tool for business management and collaboration for the hotel industry from HotelRunner Turkey. A security vulnerability exists in HotelRunner B2B versions prior to 04.06.2025, which stems from improper validation of a certificate host mismatch and could lead to HTTP...

Mavi Yeşil Software Guest Tracking Software SQL注入漏洞

Mavi Yeşil Software Guest Tracking Software is a software for tracking visitor information from Mavi Yeşil Software, Turkey. Mavi Yeşil Software Guest Tracking Software suffers from a SQL injection vulnerability that stems from improper neutralization of special elements in SQL commands, which...

Gosoft Proticaret E-Commerce 跨站请求伪造漏洞

Gosoft Proticaret E-Commerce is an e-commerce platform solution from Gosoft Turkey. A cross-site request forgery vulnerability exists in Gosoft Proticaret E-Commerce versions prior to v6.0, which stems from unvalidated input leading to a cross-site request forgery attack...