CVE-2025-41069

Insecure Direct Object Reference IDOR vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in...

EUVD-2025-169288

Insecure Direct Object Reference IDOR vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in...

CVE-2025-41069

The vulnerability is an Insecure Direct Object Reference (IDOR) in DeporSite of T-INNOVA. An attacker can manipulate requests via the idUsuario parameter in /ajax/TInnova_v2/Formulario_Consentimiento/llamadaAjax/obtenerDatosConsentimientos to access or modify resources they should not. Documented...

CVE-2025-41069 Insecure Direct Object References (IDOR) in DeporSite of T-Innova DeporSite

Insecure Direct Object Reference IDOR vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in...

CVE-2025-41069: Authorization Bypass Through User-Controlled Key

Insecure Direct Object Reference IDOR vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in...

EUVD-2025-10931

Malicious code in bioql PyPI...

EUVD-2025-10932

Malicious code in bioql PyPI...

CVE-2025-3575

Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/establecerUsuarioSeleccion" endpoint...

CVE-2025-3575

Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/establecerUsuarioSeleccion" endpoint...

CVE-2025-3575: Authorization Bypass Through User-Controlled Key

Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/establecerUsuarioSeleccion" endpoint...

CVE-2025-3574: Authorization Bypass Through User-Controlled Key

Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/obtenerFamiliaUsuario" endpoint...

PT-2025-16306

Name of the Vulnerable Software and Affected Versions Deporsite from T-INNOVA affected versions not specified Description The issue allows an attacker to retrieve sensitive information from other users. This is achieved via the idUsuario parameter in the "/helper/Familia/obtenerFamiliaUsuario"...

T-INNOVA Deporsite security vulnerabilities

T-INNOVA Deporsite is an application from T-INNOVA. A security vulnerability exists in T-INNOVA Deporsite that stems from improper handling of the idUsuario parameter in the /helper/Familia/establecerUsuarioSeleccion endpoint, which could lead to the disclosure of sensitive information...

PT-2025-16309 · Deporsite · Deporsite

Name of the Vulnerable Software and Affected Versions: Deporsite affected versions not specified Description: The issue allows an attacker to retrieve sensitive information from other users via the idUsuario parameter in the "/helper/Familia/establecerUsuarioSeleccion" endpoint. Recommendations: ...

Virtua Cobranca SQL Injection Vulnerability

Virtua Cobranca, a CRM software for call centers and collection and finance departments from Virtua Brazil, is vulnerable to SQL injection in versions prior to Virtua Cobranca 12R. The vulnerability stems from a missing data filter escape in the idusuario parameter in login.php. An attacker could...