neto

Project Neto: Un conjunto de herramientas para analizar complementos del navegador Descripción general Project Neto es un paquete de Python 3 concebido para analizar y desvelar características ocultas de complementos y extensiones del navegador para navegadores conocidos como Firefox y Chrome...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2025-28357

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request...

CVE-2025-28357

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2024-57494: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

Neto E-Commerce CMS 安全漏洞

Neto E-Commerce CMS is an e-commerce content management system from Neto Australia. A security vulnerability exists in Neto E-Commerce CMS versions 6.313.0 through 6.3115, which stems from the presence of cross-site scripting in the kw parameter, which could lead to elevation of privilege...

CVE-2025-28357

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request...

Neto CMS 安全漏洞

Neto CMS is an e-commerce platform from Neto Australia. A security vulnerability exists in Neto CMS versions v6.313.0 through v6.314.0 that originates from a specially crafted HTTP request resulting in a CRLF injection that may execute arbitrary code...

CVE-2025-28357

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request...

PT-2025-40282

Name of the Vulnerable Software and Affected Versions Neto E-Commerce CMS versions 6.313.0 through 6.3115 Description A Cross Site Scripting issue exists in Neto E-Commerce CMS. This allows a remote attacker to potentially escalate privileges. The issue is related to the kw parameter...

CVE-2024-57494

Neto E-Commerce CMS versions 6.313.0 through 6.3115 are affected by a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit the kw parameter to potentially escalate privileges . To remediate this issue, users should update to a version later than 6.3115. Exploitation details are...

CVE-2025-28357: Improper Neutralization of CRLF Sequences

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request...

PT-2025-40283

Name of the Vulnerable Software and Affected Versions Neto CMS versions 6.313.0 through 6.314.0 Description A CRLF injection flaw exists in Neto CMS. This issue allows attackers to potentially execute arbitrary code by submitting a specially crafted HTTP request. The vulnerability is due to...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2025-28357

Neto CMS versions v6.313.0 through v6.314.0 are susceptible to a CRLF injection vulnerability. The root cause is insufficient input validation regarding carriage return and line feed characters, which allows an attacker to submit a specially crafted HTTP request. Successful exploitation can lead ...

WordPress Download Manager plugin < 3.3.00 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Miguel Xavier Penha Neto in WordPress Plugin Download Manager versions 3.3.00...

WordPress Mailchimp for WooCommerce plugin <= 2.7.1 - Authenticated Server-Side Request Forgery (SSRF) vulnerability

Authenticated Server-Side Request Forgery SSRF vulnerability discovered by Miguel Xavier Penha Neto in WordPress Mailchimp for WooCommerce plugin versions = 2.7.1. Solution Update the WordPress MailChimp For WooCommerce plugin to the latest available version at least 2.7.2...

CVE-2021-26578

HPE Network Orchestrator (NetO) prior to version 2.5 is affected by a SQL injection vulnerability in the connections resource, triggered via user input that is not properly filtered. ZDI details a remote, unauthenticated attacker leveraging a crafted uaf-token header to execute SQL and disclose s...