Soul-Collector

Windows Post-Exploitation & Credential Hunting Tool Uma ferra...

EUVD-2020-4595

Malware in sbrugna...

CVE-2024-41503

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the field "Ttulo" title inside the filter Save option in the "Busca" search function...

CVE-2024-41503: Improper Neutralization of Input During Web Page Generation

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the field "Ttulo" title inside the filter Save option in the "Busca" search function...

Jetimob Plataforma Imobiliaria Cross-Site Scripting Vulnerability

Jetimob Plataforma Imobiliaria is a real estate platform from Jetimob Brazil. A cross-site scripting vulnerability exists in Jetimob Plataforma Imobiliaria version 20240627-0, which stems from a cross-site scripting vulnerability in the Ttulo field of the Busca function, which could lead to the...

iSmartgate PRO Cross-Site Request Forgery Vulnerability (CNVD-2021-01047)

The iSmartgate PRO is a smart garage door opening system. A cross-site request forgery vulnerability exists in iSmartgate PRO 1.5.9. An attacker can exploit this vulnerability to conduct a cross-site request forgery attack via the busca parameter in a form used to search for users...

CVE-2020-12282

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

CVE-2020-12282

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

Cross site request forgery (csrf)

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

CVE-2020-12282

CVE-2020-12282 affects iSmartgate PRO 1.5.9. The issue is a CSRF vulnerability in the form used to search for users, via the busca parameter in /index.php, which can be combined with a reflected XSS vulnerability. The connected Red Hat/CNVD/CVE entries reiterate the same description. The document...

PT-2020-13093

Name of the Vulnerable Software and Affected Versions iSmartgate PRO version 1.5.9 Description The issue concerns a CSRF vulnerability that can be exploited via the busca parameter in the form used for searching for users, accessible through the "/index.php" API endpoint. This vulnerability can b...

CVE-2020-12282: Cross-Site Request Forgery (CSRF)

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

CVE-2018-18963

Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI...

CVE-2018-18963

Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI...

CVE-2018-18963: Improper Neutralization of Special Elements used in an SQL Command

Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI...

PT-2018-14746

Name of the Vulnerable Software and Affected Versions Degrau Publicidade e Internet Plataforma de E-commerce affected versions not specified Description The issue concerns SQL Injection via the 'busca/' URI in the Busca.aspx.cs file. This allows for potential exploitation of the database...

CVE-2018-17410

Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI...

CVE-2018-17410

Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI...

CVE-2018-17410: Improper Neutralization of Special Elements used in an SQL Command

Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI...

PT-2018-14020

Name of the Vulnerable Software and Affected Versions Horus CMS affected versions not specified Description The issue allows SQL Injection, as demonstrated by a request to the "API Endpoints: /busca or /home". Recommendations At the moment, there is no information about a newer version that...