Alerts
23 Jul 2025
Medium - CVE-2025-4296 - URL Redirection to Untrusted Site ('Open...
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HotelRunner B2B allows Forceful Browsing.This issue affects B2B: before 04.06.2025.
23 Jul 2025
NA - CVE-2025-50127 - A SQLi vulnerability in DJ-Flyer component...
A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands.
23 Jul 2025
NA - CVE-2025-54294 - A SQLi vulnerability in Komento component...
A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands.
23 Jul 2025
NA - CVE-2025-54295 - A Reflected XSS vulnerability in DJ-Reviews...
A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered.
23 Jul 2025
NA - CVE-2025-54296 - A stored XSS vulnerability in ProFiles...
A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered.
23 Jul 2025
NA - CVE-2025-54297 - A stored XSS vulnerability in CComment...
A stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla was discovered.
23 Jul 2025
Medium - CVE-2025-4411 - Improper Neutralization of Input During Web...
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting (XSS).This issue...
22 Jul 2025
NA - CVE-2025-52580 - Insertion of sensitive information into log...
Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access...