CVE-2025-41111

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'iddenuncia' in '/backend/api/buscarComentariosByDenuncia.php'...

CVE-2025-41337

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarSSOParametros.php'...

CVE-2025-41341

CVE-2025-41341 involves a missing authorization vulnerability in CanalDenuncia.app. An attacker can access other users’ information by issuing a POST to /backend/api/buscarUsuarioByDenuncia.php with the parameters id_denuncia and seguro . Affected software is CanalDenuncia.app; the vulnerability’...

CVE-2025-41339 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'idsociedad' in '/backend/api/buscarTipoDenuncia.php'...

CVE-2025-41336

CVE-2025-41336 describes a lack of authorization in CanalDenuncia.app. A malicious actor could access other users’ information by sending a POST request to the API endpoint /backend/api/buscarConfiguracionParametros.php with the parameter web. The effect is exposure of user data due to missing ac...

EUVD-2025-37751

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros.php'...

CVE-2025-41335 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'idsociedad' in '/api/buscarEmpresaById.php'...

EUVD-2025-37752

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'idsociedad' in '/api/buscarEmpresaById.php'...

CVE-2025-41335

CVE-2025-41335 concerns CanalDenuncia.app and is tied to an information-disclosure vulnerability caused by missing authorization checks for parameters id and id_sociedad in the endpoint /api/buscarEmpresaById.php. Multiple connected sources (CNVD-2025-30334, RH-CVE-2025-41335, NVD/CVELIST/CNNVD e...

CVE-2025-41113

CVE-2025-41113 affects CanalDenuncia.app due to a missing authorization check. An attacker can access other users’ data by sending a POST to /backend/api/buscarDenunciaByPin.php with the id_denuncia parameter. Root cause: lack of authorization. Impact: confidentiality exposure (HIGH). Exploitatio...

PT-2025-44998

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A missing authorization issue exists in CanalDenuncia.app that could allow an attacker to access other users' information. This is achieved by sending a POST request with the...

PT-2025-45000

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app, potentially allowing an attacker to access other users' information. This is achieved by sending a POST request to the...

CVE-2025-41030

CVE-2025-41030 affects Deporsite by T-INNOVA. The root cause is lack of authorization, allowing an unauthenticated attacker to obtain information about other users via GET /ajax/TInnova_v2/Integrantes_Recurso_v2_1/llamadaAjax/buscarPersona using the dni parameter. The CVSSv4 base score is 6.9 (ME...

PT-2025-35543

Name of the Vulnerable Software and Affected Versions: Deporsite by T-INNOVA affected versions not specified Description: The application lacks proper authorization, allowing an unauthenticated attacker to obtain information from other users. This is achieved by sending a GET request to the...

PT-2024-38993 · Abcd2 · Abcd2

Name of the Vulnerable Software and Affected Versions: ABCD ABCD2 versions up to 2.2.0-beta-1 Description: A problematic issue has been found in the software, affecting the processing of the file /buscar integrada.php. The manipulation of the Sub Expresion argument leads to cross-site scripting...

barcelonaled.com XSS vulnerability

Open Bug Bounty ID: OBB-674631 Description| Value ---|--- Affected Website:| barcelonaled.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vicensvives.cl XSS vulnerability

Open Bug Bounty ID: OBB-673589 Description| Value ---|--- Affected Website:| vicensvives.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

librosbudistas.com XSS vulnerability

Open Bug Bounty ID: OBB-594672 Description| Value ---|--- Affected Website:| librosbudistas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

deandar.com XSS vulnerability

Vulnerable URL: https://deandar.com/casa/buscar?cx=002923311741711675260:ush3gy5bwus=FORID:9="=UTF-8=deandar.com/ferratas/via-ferrata-grau-jou=www.google.com.mx/= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:|...

crepublisa.com XSS vulnerability

Vulnerable URL: http://crepublisa.com/buscar/?q=%3Csvg/onload=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18246940 VIP website status:| No Check...