Tutorials Website Employee Management System 授权问题漏洞

Tutorials Website Employee Management System is an employee management system from Tutorials Website, Inc. Tutorials Website Employee Management System has an authorization issue vulnerability that stems from improper authorization of the HTTP request processing component in file...

FosWiki Unauthorized Access

The vulnerability of the FosWiki platform lies in the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Moodle XSS

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

FosWiki Unauthorized Access

The vulnerability of the FosWiki platform lies in the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2025-43356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - webkit2gtk - The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and...

SUSE CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent...

CVE-2025-58666

Missing Authorization vulnerability in Kommo Website Chat Button: Kommo integration website-chat-button-kommo-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Website Chat Button: Kommo integration: from n/a through = 1.3.1...

CVE-2025-10793

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/adminaccountdelete.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The...

ENOVIA Change Manager XSS

The vulnerability of the ENOVIA Change Manager software for managing changes and configurations in engineering and production processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

Multidisciplinary Optimization Engineer XSS

The vulnerability of the software solution for multidisciplinary optimization relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Product Managers XSS

The vulnerability of the software used by Product Managers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Items Management Service XSS

The vulnerability of the Items Management Service component of the software solution for designing and optimizing service processes, Service Process Engineer, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform...

JEvents Component Code Execution

The vulnerability of the JEvents component in the Joomla! content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Collaborative Industry Innovator XSS

The vulnerability of the collaborative toolset for content collaboration and management in Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform...

ENOVIA Collaborative Industry Innovator XSS

The vulnerability of the tools for collaborative work and content management in ENOVIA Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site...

City Referential Manager XSS

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Collaborative Industry Innovator XSS

The vulnerability of the collaborative toolset for content collaboration and management in Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform...

ENOVIA Collaborative Industry Innovator XSS

The vulnerability of the tools for collaborative work and content management in ENOVIA Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site...

City Referential Manager XSS

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Project Portfolio Manager XSS

The vulnerability of the software solution for managing project portfolios with Project Portfolio Manager is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...