Company Name: Trendyol Company HackerOne URL: https://hackerone.com/trendyol Submitted By:samark19Link to Submitters Profile:https://hackerone.com/samark19 Report Title:Cache Poisoning Allows Zero Interaction Store XSSReport...
Vulnerability Summary: CVE-2025-2590 A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic....
Vulnerability Summary: CVE-2025-2591 A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects...
Vulnerability Summary: CVE-2025-2589 A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue...
Vulnerability Summary: CVE-2025-2592 A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3....
Vulnerability Summary: CVE-2025-2593 A vulnerability has been found in FastCMS up to 0.1.5 and classified as critical. Affected by this...
Vulnerability Summary: CVE-2025-29927 Next.js is a React framework for building full-stack web applications. Prior to 14.2.25 and 15.2.3, it is...
Vulnerability Summary: CVE-2025-27612 libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the...
Vulnerability Summary: CVE-2025-30157 Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's ext_proc HTTP...
Vulnerability Summary: CVE-2025-24915 When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to...
Vulnerability Summary: CVE-2025-30168 Parse Server is an open source backend that can be deployed to any infrastructure that can run...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Vulnerability Summary: CVE-2025-29230 Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.emailReg function. The vulnerability...
Vulnerability Summary: CVE-2025-2598 When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with...
Vulnerability Summary: CVE-2025-29226 In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via...
Vulnerability Summary: CVE-2019-16151 An improper neutralization of input during web page generation vulnerability in FortiOS 6.4.1 and below, 6.2.9 and...
Vulnerability Summary: CVE-2025-29227 In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via...
Vulnerability Summary: CVE-2025-30349 Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to...
