72 matches found
CVE-2024-35321
MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting XSS vulnerability via the msgtipo parameter...
CVE-2024-25814
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the msg parameter...
CVE-2024-25814
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the msg parameter...
CVE-2024-25814
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the msg parameter...
CVE-2024-25814
The MyNET online management system (developed by AIRC Portugal ) is vulnerable to a reflected cross-site scripting (XSS) flaw in versions up to v26.05 . The issue stems from improper neutralization of input via the msg parameter , which could allow an attacker to inject malicious scripts into web...
PT-2025-52681
Name of the Vulnerable Software and Affected Versions MyNET versions 26.06 and earlier Description An iframe injection issue exists that allows a remote attacker to execute arbitrary code. The issue is related to the src parameter. Recommendations Versions prior to 26.06 should be updated...
AIRC MyNET 安全漏洞
AIRC MyNET is a specialized online management system from AIRC Portugal. A security vulnerability exists in AIRC MyNET v26.05 and earlier versions, which stems from a reflected cross-site scripting issue with the msg parameter...
CVE-2024-35321: Improper Neutralization of Input During Web Page Generation
MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting XSS vulnerability via the msgtipo parameter...
CVE-2024-25812: Improper Neutralization of Input During Web Page Generation
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the src parameter...
AIRC MyNET 安全漏洞
AIRC MyNET is a specialized online management system from AIRC Portugal. A security vulnerability exists in AIRC MyNET v26.05 and earlier versions, which stems from a reflected cross-site scripting issue with the src parameter...
CVE-2024-27708
Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter...
CVE-2024-25812
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the src parameter...
CVE-2024-27708
The AIRC MyNET online management system (versions v.26.06 and earlier ) contains an iframe injection vulnerability. A remote attacker can exploit this issue via the src parameter to execute arbitrary code . Remediation involves updating the software to a version newer than 26.06 . Exploitation de...
PT-2025-52676
Name of the Vulnerable Software and Affected Versions MyNET versions prior to 26.05 Description The software contains a reflected cross-site scripting XSS issue. The issue is related to the msg parameter. An attacker could potentially inject malicious scripts into a web page viewed by other users...
AIRC MyNET 安全漏洞
AIRC MyNET is a specialized online management system from AIRC Portugal. A security vulnerability exists in AIRC MyNET v26.06 and earlier versions, which stems from an iframe injection issue with the src parameter that could lead to the execution of arbitrary code by a remote attacker...
CVE-2024-27708: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter...
PT-2025-52677
Name of the Vulnerable Software and Affected Versions MyNET versions up to 26.08 Description The software contains a Reflected cross-site scripting XSS issue. The vulnerability is located in the msgtipo parameter. A successful exploit could allow an attacker to inject malicious scripts into a web...
AIRC MyNET 安全漏洞
AIRC MyNET is a specialized online management system from AIRC Portugal. A security vulnerability exists in AIRC MyNET v26.08 and earlier versions, which stems from a reflected cross-site scripting issue with the msgtipo parameter...