Disclosure 16

• [CVE-2025-52022] Information disclosure via verbose error messages in Aptsys gemsloyalty backend Nov 11, 2025
• [CVE-2025-52026] Unauthenticated data exposure in Aptsys gemscms backend Nov 11, 2025
• [CVE-2025-52025] SQL Injection vulnerability in Aptsys gemscms backend Nov 11, 2025
• [CVE-2025-52024] Unauthenticated access to exposed developer web service panels in Aptsys POS backend Nov 11, 2025
• [CVE-2025-52023] Information disclosure via verbose error messages in Aptsys gemscms backend Nov 11, 2025
• [CVE REQUESTED] Debugging Stack Trace Disclosure on Ednovation Dashboard Subdomain Aug 22, 2025
• [CVE REQUESTED] Unauthenticated Internal API Testing Interface Exposing Hardcoded Production Credentials Jul 29, 2025
• [CVE REQUESTED] phpinfo() Exposure on Ednovation's Production Subdomain Jul 29, 2025
• [CVE REQUESTED] Directory Listing Exposure on Ednovation's Production Subdomain EProject Jul 29, 2025
• [CVE REQUESTED] Weak Password Hashing Using MD5 in Ednovation's AIMath Web App Jul 28, 2025
• [CVE REQUESTED] Directory Listing Exposure on Ednovation's Development Subdomain Jul 28, 2025
• [CVE REQUESTED] Public Data Exposure via Broken Auth in AIMath Web App Jul 27, 2025
• [CVE REQUESTED] ParentCommApp SQL Injection Backend API Jul 26, 2025
• [CVE REQUESTED] ParentCommApp Insecure Direct Object Reference (IDOR) Jul 26, 2025
• [CVE REQUESTED] Broken JWT Authentication – Hardcoded Shared Secret in ParentCommApp (iOS) Jul 26, 2025
• [CVE REQUESTED] Unauthenticated API Exposure in Ednovation ParentCommApp Jul 25, 2025