Malicious code in do-wnload-available-135622-de-facto-s0jrf-jhgphg (npm)

The package do-wnload-available-135622-de-facto-s0jrf-jhgphg was found to contain malicious code...

MAL-2025-18545 Malicious code in do-wnload-available-135622-de-facto-s0jrf-jhgphg (npm)

The package do-wnload-available-135622-de-facto-s0jrf-jhgphg was found to contain malicious code...

Malicious code in @zalastax/nolb-de- (npm)

The package @zalastax/nolb-de- was found to contain malicious code...

MAL-2025-17438 Malicious code in como-espiar-whatsapp-de-forma-segura (npm)

The package como-espiar-whatsapp-de-forma-segura was found to contain malicious code...

MAL-2025-9912 Malicious code in @zalastax/nolb-_de (npm)

The package @zalastax/nolb-de was found to contain malicious code...

MAL-2025-11112 Malicious code in @zalastax/nolb-de- (npm)

The package @zalastax/nolb-de- was found to contain malicious code...

MAL-2025-11115 Malicious code in @zalastax/nolb-de_ (npm)

The package @zalastax/nolb-de was found to contain malicious code...

Malicious code in como-espiar-whatsapp-de-forma-segura (npm)

The package como-espiar-whatsapp-de-forma-segura was found to contain malicious code...

Malicious code in a-lbum-do-wnload-avai-lable-file-363039-de-doorn-lu0q1-tqebeu (npm)

The package a-lbum-do-wnload-avai-lable-file-363039-de-doorn-lu0q1-tqebeu was found to contain malicious code...

Malicious code in @zalastax/nolb-de_ (npm)

The package @zalastax/nolb-de was found to contain malicious code...

CVE-2025-8920

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...

CVE-2025-8920

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...

CVE-2025-8919

A vulnerability was determined in Portabilis i-Diario up to 1.6. Affected is an unknown function of the file /objetivos-de-aprendizagem-e-habilidades of the component History Page. The manipulation of the argument código/objetivo habilidade leads to cross site scripting. It is possible to launch...

CVE-2025-8920 Portabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scripting

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...

CVE-2025-8920 Portabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scripting

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...

MAL-2025-41768 Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Portabilis i-Diário code injection vulnerability

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilis i-Diário version 1.6, which results from a cross-site scripting attack due to a misuse of the parameter Planos de ensino in...

PT-2025-33063 · Portabilis · I-Diario

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario version 1.6 Description: A vulnerability exists in Portabilis i-Diario 1.6 within the Dicionário de Termos BNCC Page component. Manipulation of the Planos de ensino argument in the /dicionario-de-termos-bncc file leads to...

CVE-2025-8920: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...