PT-2025-32019

Name of the Vulnerable Software and Affected Versions card management module affected versions not specified Description An iterator failure exists within the card management module. Successful exploitation of this issue may affect function stability. Recommendations At the moment, there is no...

CVE-2025-54613: Improper Control of a Resource Through its Lifetime

Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability...

CVE-2025-54612: Improper Control of a Resource Through its Lifetime

Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability...

CVE-2025-54608: Missing Authorization

Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set...

PT-2025-32020

Name of the Vulnerable Software and Affected Versions card management module affected versions not specified Description An iterator failure exists within the card management module. Successful exploitation of this issue may affect function stability. Recommendations At the moment, there is no...

CVE-2025-7112

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=CODcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads to...

CVE-2025-7112

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...

CVE-2025-7112

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...

CVE-2025-7112

Portabilis i-Educar 2.9.0, Function Management Module, has a cross-site scripting (XSS) vulnerability in the educar_funcao_det.php endpoint caused by unsafely manipulating the Função parameter (cod_funcao/ref_cod_instituicao). The issue can be triggered remotely and is publicly disclosed. Multipl...

CVE-2025-7112 Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...

CVE-2025-7112 Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...

CVE-2025-7112 Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...

CVE-2025-7112: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...

CVE-2025-53185: Use After Free

Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity...

PT-2025-28126 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A vulnerability was found in the Function Management Module, affecting the processing of the file /intranet/educar funcao det.php?cod funcao=COD&ref cod instituicao=COD. The manipulation of the...

CVE-2025-6535

A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerability affects the function list of the file novel-admin/src/main/resources/mybatis/system/UserMapper.xml of the component User Management Module. The manipulation of the argument...

CVE-2025-6535

A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerability affects the function list of the file novel-admin/src/main/resources/mybatis/system/UserMapper.xml of the component User Management Module. The manipulation of the argument...

CVE-2025-6535 xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection

A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerability affects the function list of the file novel-admin/src/main/resources/mybatis/system/UserMapper.xml of the component User Management Module. The manipulation of the argument...

CVE-2025-6535 xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection

A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerability affects the function list of the file novel-admin/src/main/resources/mybatis/system/UserMapper.xml of the component User Management Module. The manipulation of the argument...

CVE-2025-6535

CVE-2025-6535 affects xxyopen/201206030 novel-plus (up to 5.1.3). The vulnerability resides in the User Management Module, specifically the file path UserMapper.xml, where manipulation of the sort and order arguments leads to SQL injection. Exploitation is possible remotely, and public disclosure...