Malicious Package

Overview alive-cor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Astaroth Banking Trojan Targets Brazilians via WhatsApp Messages

Researchers at Acronis have discovered a new campaign called Boto Cor-de-Rosa, where the Astaroth banking malware spreads like a worm through WhatsApp Web to steal contact lists and banking credentials...

The vulnerability in the adicionar_cor.php script of the WeGIA web manager allows a hacker to perform cross-site scripting attacks.

The vulnerability of the adicionarcor.php script of the WeGIA web manager is related to the lack of measures taken to protect the website structure during the processing of the cor parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17256)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adicionarcor.php endpoint cor parameter, no details of the vulnerability are provided at this time...

CVE-2025-53929

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the "adicionarcor.php" endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inject...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.4.5, which stems from insufficient cleanup of the adicionarcor.php endpoint cor parameter, which could lead to a stored cross-site...

CVE-2025-53929: Improper Neutralization of Input During Web Page Generation

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcor.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inject...

PT-2025-4857 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.10 Description: A SQL Injection vulnerability was identified in the WeGIA application, specifically in the "adicionar cor.php" endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in the...

BD多款产品 安全漏洞

BD BACTEC Blood Culture System and others are products of BD Medical BD, Inc. the BD BACTEC Blood Culture System is a blood culture media system. the BD COR System is a fully automated and integrated high-throughput diagnostic system. the BD EpiCenter Microbiology Data Management System is a...

Code-Projects Concert Ticket Ordering System 注入漏洞

Code-Projects Concert Ticket Ordering System is a Code-Projects open source concert ticket ordering system. Code-Projects Concert Ticket Ordering System version 1.0 suffers from an injection vulnerability that originates from the parameter mai in the file /tourcor.php, which can lead to SQL...

CVE-2024-11970: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is an unknown function of the file /tourcor.php. The manipulation of the argument mai leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2024-31902 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue is related to Cross Site Scripting XSS in the nm cor.php file, specifically via the form and field parameters. This allows for potential malicious script injection...

Malicious code in alive-cor (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1744 Malicious code in alive-cor (npm)

--- -= Per source details. Do not edit below this line.=-...

cor-caroli.fr Cross Site Scripting vulnerability OBB-3886718

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cor-caroli.fr Cross Site Scripting vulnerability OBB-3878596

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cor-caroli.fr Cross Site Scripting vulnerability OBB-3508375

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cor-caroli.fr Cross Site Scripting vulnerability OBB-3458191

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

woningontruiming-cor-oosterveld.nl Cross Site Scripting vulnerability OBB-3079737

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apis-cor.com XSS vulnerability

Vulnerable URL: http://apis-cor.com/ajax-search-result.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 131419 VIP website status:| No Check apis-cor.com SSL connection:| Grade: ...