CVE-2025-66225

OrangeHRM versions 5.0–5.7 are vulnerable to account takeover due to an unvalidated username in the final password-reset request. The reset workflow does not verify that the submitted username matches the account initiated for the reset, allowing an attacker with a valid reset link to modify the ...

Azeus CMS V2.0 suffers from logical design flaws

Azeus CMS is a cms system made by Azeus Studio, this CMS is written in UTF-8 coding. A logical design vulnerability exists in Azeus CMS V2.0. After logging into the system, an attacker can use any user name to comment and perform unauthorized operations by grabbing packets and modifying the user...