CVE-2025-40633: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability has been found in Koibox for versions prior to e8cbce2. This vulnerability allows an authenticated attacker to upload an image containing malicious JavaScript code as profile picture in the '/es/dashboard/clientes/ficha/' endpoint...

Akamai e Exceda: maximizando juntas o valor do cliente e do parceiro na América Latina

A Akamai anunciou hoje um acordo de compra da Exceda, nossa maior parceira de canal na América Latina. Quero compartilhar o que essa aquisição significa para nossos clientes e parceiros e por que estou tão empolgado com o potencial disso para todos nós. A partir de sua parceria inicial em 2002, a...

MapOS Stored Cross-Site Scripting Vulnerability

MapOS is a free service order control system based on PHP and MySQL. A cross-site scripting vulnerability exists in /clientes/visualizar in MapOS 3.1.11 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of specially crafted...

CVE-2017-16919: Improper Neutralization of Input During Web Page Generation

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

PT-2017-14635

Name of the Vulnerable Software and Affected Versions MapOS versions 3.1.11 and earlier Description The issue is related to a Stored Cross-site Scripting XSS vulnerability. It affects the "/clientes/visualizar" API endpoint, allowing remote attackers to inject arbitrary web script or HTML via a...

SAGU-PRO 1.0 - Multiple Remote File Inclusions

\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- SAGU-PRO v1.0 Multiple Remote File Include Vulnerability Script: http://gulbf.com.br/?q=node/145 Author: mat Mail: [email protected] ---------------Ooooo------------------------------------------------...