Portabilis i-Diário security vulnerabilities

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A security vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from an improperly restricted interface layer that can be remotely triggered by a...

Portabilis i-Diário security vulnerabilities

Portabilis i-Diário is an open source school academic calendar and teacher interaction management system from Portabilis, Brazil. A security vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from a difference in response time of the component Password Recovery...

Portabilis i-Diário security vulnerabilities

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A security vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from a failure to filter parameters in planos-de-ensino-por-areas-de-conhecimento...

Portabilis i-Diário security vulnerabilities

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A security vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from a failure to filter parameters in planos-de-ensino-por-areas-de-conhecimento...

Portabilis i-Diário security vulnerabilities

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A security vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from a failure to filter parameters in planos-de-ensino-por-areas-de-conhecimento...

CVE-2025-8920

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...

CVE-2025-8919

A vulnerability was determined in Portabilis i-Diario up to 1.6. Affected is an unknown function of the file /objetivos-de-aprendizagem-e-habilidades of the component History Page. The manipulation of the argument código/objetivo habilidade leads to cross site scripting. It is possible to launch...

CVE-2025-8918

A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarinstituicaocad.php of the component Editar Page. The manipulation of the argument neighborhood name leads to cross site scripting. The attack may be initiated...

Security Bulletin: IBM i is affected by an authenticated user gaining elevated privileges due to a web session hijacking vulnerability in IBM Digital Certificate Manager for i [CVE-2025-36119].

Summary IBM i is affected by a user authenticated to IBM Digital Certificate Manager for i gaining elevated privileges due to a web session hijacking vulnerability as described in the vulnerability details section. This bulletin identifies the steps to take to address the vulnerability as describ...

Malicious code in @zalastax/nolb-gulp-i (npm)

The package @zalastax/nolb-gulp-i was found to contain malicious code...

Malicious code in @zalastax/nolb-qmuzik-i (npm)

The package @zalastax/nolb-qmuzik-i was found to contain malicious code...

Malicious code in @zalastax/nolb-google-i (npm)

The package @zalastax/nolb-google-i was found to contain malicious code...

Malicious code in @zalastax/nolb-hapi-i (npm)

The package @zalastax/nolb-hapi-i was found to contain malicious code...

Malicious code in @zalastax/nolb-json-i (npm)

The package @zalastax/nolb-json-i was found to contain malicious code...

Malicious code in @zalastax/nolb-ngx-i (npm)

The package @zalastax/nolb-ngx-i was found to contain malicious code...

Malicious code in @zalastax/nolb-node-i (npm)

The package @zalastax/nolb-node-i was found to contain malicious code...

Malicious code in i-knew-that (npm)

The package i-knew-that was found to contain malicious code...

Malicious code in @zalastax/nolb-passport-i (npm)

The package @zalastax/nolb-passport-i was found to contain malicious code...

Malicious code in @zalastax/nolb-graphql-i (npm)

The package @zalastax/nolb-graphql-i was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-i (npm)

The package @zalastax/nolb-demo-i was found to contain malicious code...