CVE-2025-6396

CVE-2025-6396 affects Webbeyaz Website Design Website Software (versions through 2025.07.14). The root cause is improper neutralization of input during web page generation, leading to cross-site scripting (XSS). The CVSS–3.1 vector indicates NETWORK access, LOW attack complexity, no privileges re...

CVE-2025-6396 XSS in Webbeyaz's web site

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting XSS. This issue affects Website Software: through 2025.07.14...

PT-2025-39677

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A security flaw exists in code-projects E-Commerce Website 1.0. The issue involves the manipulation of the Search argument in the file /pages/admin index search.php, leading to a SQL...

PT-2025-39645

Name of the Vulnerable Software and Affected Versions Webbeyaz Website Design Website Software versions through 2025.07.14 Description A flaw exists in Webbeyaz Website Design Website Software that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during w...

Tutorials Website Employee Management System 授权问题漏洞

Tutorials Website Employee Management System is an employee management system from Tutorials Website, Inc. Tutorials Website Employee Management System has an authorization issue vulnerability that stems from improper authorization of the HTTP request processing component in file...

Webbeyaz Website Software 跨站脚本漏洞

Webbeyaz Website Software is a platform for building websites from the Turkish company Webbeyaz. A cross-site scripting vulnerability exists in Webbeyaz Website Software version 2025.07.14 and earlier, which stems from improper input neutralization during web page generation and could lead to...

CVE-2025-11037: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/adminindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to th...

Code-Projects E-Commerce Website SQL注入漏洞

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter userid in the file /pages/adminaccountupdate.php. An attacker can exploit this vulnerabili...

The vulnerability of the Airmail email client is related to insufficient protection of the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Airmail email client is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4, related to the lack of protective measures for the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

CVE-2025-11030: Improper Authorization

A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60. Impacted is an unknown function of the file /admin/all-applied-leave.php of the component HTTP Request Handler. The manipulation results in improper authorization. The atta...

CVE-2025-6396: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting XSS. This issue affects Website Software: through 2025.07.14...

CVE-2025-11036: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/adminaccountupdate.php. Such manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be...

The vulnerability of the FosWiki platform, related to the lack of measures taken to protect the website structure, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the FosWiki platform lies in the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the FosWiki platform, related to the lack of measures taken to protect the website structure, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the FosWiki platform lies in the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability in the virtual learning environment Moodle, related to the lack of security measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

Linux Distros Unpatched Vulnerability : CVE-2025-43356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - webkit2gtk - The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and...

SUSE CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent...

CVE-2025-58666

Missing Authorization vulnerability in Kommo Website Chat Button: Kommo integration website-chat-button-kommo-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Website Chat Button: Kommo integration: from n/a through = 1.3.1...

CVE-2025-10793

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/adminaccountdelete.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The...