CVE-2021-4266

The CVE-2021-4266 entry concerns Webdetails cpf (versions up to 9.5.0.0-80). The vulnerability targets an unknown function in core/src/main/java/pt/webdetails/cpf/packager/DependenciesPackage.java where manipulation of the baseUrl argument causes cross-site scripting. It can be triggered remotely...

CVE-2021-4266 Webdetails cpf DependenciesPackage.java cross site scripting

A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/main/java/pt/webdetails/cpf/packager/DependenciesPackage.java. The manipulation of the argument baseUrl leads to cross site scripting. It is possible t...

CVE-2021-4266 Webdetails cpf DependenciesPackage.java cross site scripting

A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/main/java/pt/webdetails/cpf/packager/DependenciesPackage.java. The manipulation of the argument baseUrl leads to cross site scripting. It is possible t...

CVE-2021-4266: Improper Neutralization

A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/main/java/pt/webdetails/cpf/packager/DependenciesPackage.java. The manipulation of the argument baseUrl leads to cross site scripting. It is possible t...

CVE-2021-3005

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information e.g., a CPF number via a modified titulo aka invoice number value to the central/recibo.php URI...

CVE-2021-3005: Undefined Security Weakness

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information e.g., a CPF number via a modified titulo aka invoice number value to the central/recibo.php URI...

MK-AUTH Security Vulnerability

MK-AUTH is an access control system by the individual developer Pedro Filho in Brazil. A security vulnerability exists in MK-AUTH version 19.01 K4.9 and earlier versions, which allows remote attackers to obtain sensitive information such as CPF numbers to the central recibo.php URI via a modified...

PT-2017-14034 · E Sic · E-Sic

Name of the Vulnerable Software and Affected Versions: E-Sic version 1.0 Description: A SQL Injection issue exists in the password reset parameter, specifically the cpfcnpj parameter to the "/reset" URI. Recommendations: For E-Sic version 1.0, avoid using the cpfcnpj parameter in the /reset URI...

Brazilian Government IDs Used as Spear Phish Bait

Brazilians are the target of new and devilishly convincing e-mail-based scams that purport to be official customer communication from a large Brazilian bank and use stolen identity data to convince victims that the message is for real. According to a post on Kaspersky Lab’s Securelist blog,...