CVE-2025-5966 – Zohocorp ManageEngine Exchange Reporter Plus Stored Cross-Site Scripting (XSS)

June 26, 2025

CVE ID : CVE-2025-5966

Published : June 26, 2025, 1:15 p.m. | 1 hour, 29 minutes ago

Description : Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report.

Severity: 8.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6693 – RT-Thread Device Memory Corruption Vulnerability

Next Article CVE-2025-6562 – Hunt Electronic Hybrid DVR OS Command Injection Vulnerability

Highlights

CVE-2025-43560 – ColdFusion Arbitrary Code Execution Vulnerability

May 13, 2025

CVE ID : CVE-2025-43560

Published : May 13, 2025, 9:16 p.m. | 1 hour, 58 minutes ago

Description : ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.

Severity: 9.1 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-5966 – Zohocorp ManageEngine Exchange Reporter Plus Stored Cross-Site Scripting (XSS)

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

CVE-2025-43950 – “Microsoft DPMAdirektPro DLL Hijacking Privilege Escalation Vulnerability”

CVE-2025-4921 – Firefox JavaScript Out-of-Bounds Access Vulnerability

South of Midnight release date and launch times confirmed: Preload now and see when early access is available in your region

My journey from Webpack to Vite and finally Rsbuild

CVE-2025-43560 – ColdFusion Arbitrary Code Execution Vulnerability

CVE-2025-4977 – Netgear DGND3700 Cross-Site Scripting Vulnerability

CVE-2025-6334 – D-Link DIR-867 Stack-Based Buffer Overflow Vulnerability

CVE-2025-32403 – RT-Labs P-Net OOB Write Vulnerability

CVE-2025-5966 – Zohocorp ManageEngine Exchange Reporter Plus Stored Cross-Site Scripting (XSS)

Related Posts