2786 matches found
CVE-2025-9105 Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-areas-de-conhecimento cross site scripting
A vulnerability has been found in Portabilis i-Diario up to 1.5.0. The impacted element is an unknown function of the file /planos-de-ensino-por-areas-de-conhecimento/ of the component Informações Adicionais Page. Such manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site...
CVE-2025-9105 Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-areas-de-conhecimento cross site scripting
A vulnerability has been found in Portabilis i-Diario up to 1.5.0. The impacted element is an unknown function of the file /planos-de-ensino-por-areas-de-conhecimento/ of the component Informações Adicionais Page. Such manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site...
CVE-2025-9104
Portabilis i-Diario vulnerable up to version 1.5.0. Affected component: Informações Adicionais Page, file planos-de-aulas-por-disciplina/. Manipulation of the Parecer/Objeto de Conhecimento/Habilidades argument triggers cross-site scripting. It is a remote, publicly exploitable issue; exploit has...
CVE-2025-9104 Portabilis i-Diario Informações Adicionais /planos-de-aulas-por-disciplina cross site scripting
A flaw has been found in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /planos-de-aulas-por-disciplina/ of the component Informações Adicionais Page. This manipulation of the argument Parecer/Objeto de Conhecimento/Habilidades causes cross site scripting...
CVE-2025-9104 Portabilis i-Diario Informações Adicionais /planos-de-aulas-por-disciplina cross site scripting
A flaw has been found in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /planos-de-aulas-por-disciplina/ of the component Informações Adicionais Page. This manipulation of the argument Parecer/Objeto de Conhecimento/Habilidades causes cross site scripting...
CVE-2025-9104 Portabilis i-Diario Informações Adicionais /planos-de-aulas-por-disciplina cross site scripting
A flaw has been found in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /planos-de-aulas-por-disciplina/ of the component Informações Adicionais Page. This manipulation of the argument Parecer/Objeto de Conhecimento/Habilidades causes cross site scripting...
Portabilis i‑Diário 安全漏洞
Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A security vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from a failure to filter parameters in planos-de-ensino-por-areas-de-conhecimento...
PT-2025-33633 · Portabilis · I-Diario
Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario versions up to 1.5.0 Description: A cross-site scripting issue exists in Portabilis i-Diario. The vulnerability is located in the /planos-de-aulas-por-disciplina/ file of the Informações Adicionais Page component...
CVE-2025-7662
The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2025-7662
The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
WordPress plugin Gestion de tarifs SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection...
Linux Distros Unpatched Vulnerability : CVE-2025-22080
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdrfirstde The deoff and used variables come from the...
PT-2025-33461 · WordPress · Gestion De Tarifs
Name of the Vulnerable Software and Affected Versions: Gestion de tarifs plugin for WordPress versions prior to 1.5 Description: The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the tarif and intitule shortcodes due to insufficient escaping on user-supplied parameters...
WordPress Gestion de tarifs plugin <= 1.4 - Authenticated (Contributor+) SQL Injection vulnerability
Authenticated Contributor+ SQL Injection vulnerability discovered by johska in WordPress Plugin Gestion de tarifs versions = 1.4...
Malicious code in como-espiar-whatsapp-de-forma-segura (npm)
The package como-espiar-whatsapp-de-forma-segura was found to contain malicious code...
MAL-2025-11115 Malicious code in @zalastax/nolb-de_ (npm)
The package @zalastax/nolb-de was found to contain malicious code...
Malicious code in @zalastax/nolb-de- (npm)
The package @zalastax/nolb-de- was found to contain malicious code...
Malicious code in @zalastax/nolb-de_ (npm)
The package @zalastax/nolb-de was found to contain malicious code...