CVE-2025-5343

by admin | Nov 12, 2025

Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option.

CVE-2025-5342

by admin | Nov 12, 2025

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.

Cross-site scripting (XSS) vulnerability in blog-details.php in Hiruna Gallage’s Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter.

CVE-2025-46423

by | Nov 12, 2025

Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to...

CVE-2025-46422