CVE-2024-41505

CVE-2024-41505 CVE: CVE-2024-41505 软件: Jetimob Plataforma Imobiliaria CRM/ERP/CMS 版本: 20240627-0 漏洞: 存储型跨站脚本 XSS 描述: 存储型XSS存在于"Pessoas"部分的"Profissão"字段中，当创建或编辑自然人时触发。随后，只要加载包含该有效载荷的人员资料，便会执行。 Payload:...

CVE-2024-41503

CVE-2024-41503 CVE: CVE-2024-41503 软件： Jetimob Plataforma Imobiliaria CRM/ERP/CMS 版本： 20240627-0 漏洞类型： 存储型跨站脚本（XSS） 描述： 整个应用程序中使用的“Busca”（搜索）功能包含一个可保存的筛选器选项——保存时有一个“Título”表单字段，允许注入 JavaScript 代码，并将代码存储到应用程序中。当筛选器被创建，或点击删除该筛选器时（出现包含有效负载的删除确认窗口），该代码便会执行。 有效负载：...

CVE-2024-41502

CVE-2024-41502 CVE: CVE-2024-41502 软件: Jetimob Plataforma Imobiliaria CRM/ERP/CMS 版本: 20240627-0 漏洞类型: 存储型跨站脚本（XSS） 描述: 在创建或编辑法人或自然人时，通过“Pessoas”部分中的表单字段“Observações”进行存储型XSS注入。之后，只要加载包含该载荷的人员资料，该脚本就会执行。 载荷:...

CVE-2024-41504

CVE-2024-41504 CVE编号： CVE-2024-41504 软件： Jetimob Plataforma Imobiliaria CRM/ERP/CMS 版本： 20240627-0 漏洞类型： 存储型跨站脚本（XSS） 描述： 在应用程序的"Oportunidades"部分创建或编辑"Atividade"（活动）时，表单字段"Descrição"允许注入JavaScript代码。当包含载荷的活动被加载时，该代码会被执行。 载荷：...

CVE-2024-41503

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the field "Ttulo" title inside the filter Save option in the "Busca" search function...

CVE-2024-41504

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS. In the "Oportunidades" opportunities section of the application when creating or editing an "Atividade" activity, the form field "Descrico" allows injection of JavaScript...

EUVD-2024-54671

Malicious code in bioql PyPI...

EUVD-2024-54670

Malicious code in bioql PyPI...

EUVD-2024-54669

Malicious code in bioql PyPI...

EUVD-2024-54668

Malicious code in bioql PyPI...

CVE-2024-41502

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS via the form field "Observaces" observances in the "Pessoas" persons section when creating or editing either a legal or a natural person...

CVE-2024-41505

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the "Pessoas" persons section via the field "Profisso" professor...

CVE-2024-41504

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS. In the "Oportunidades" opportunities section of the application when creating or editing an "Atividade" activity, the form field "Descrico" allows injection of JavaScript...

CVE-2024-41503

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the field "Ttulo" title inside the filter Save option in the "Busca" search function...

CVE-2024-41505

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the "Pessoas" persons section via the field "Profisso" professor...

CVE-2024-41504

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS. In the "Oportunidades" opportunities section of the application when creating or editing an "Atividade" activity, the form field "Descrico" allows injection of JavaScript...

CVE-2024-41503

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the field "Ttulo" title inside the filter Save option in the "Busca" search function...

CVE-2024-41502

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS via the form field "Observaces" observances in the "Pessoas" persons section when creating or editing either a legal or a natural person...

CVE-2024-41502

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS via the form field "Observaces" observances in the "Pessoas" persons section when creating or editing either a legal or a natural person...

CVE-2024-41505

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the "Pessoas" persons section via the field "Profisso" professor...