PT-2023-30298 · Totvs · Totvs Rm

Name of the Vulnerable Software and Affected Versions: TOTVS RM version 12.1 Description: A problematic vulnerability has been found in the Portal component of TOTVS RM, specifically in the Login.aspx file. The issue arises from the manipulation of the VIEWSTATE argument, leading to cross-site...

TOTVS RM Cross-Site Scripting Vulnerability

TOTVS RM is a complete human resource management solution from TOTVS Brazil. A cross-site scripting vulnerability exists in TOTVS RM version 12.1, which stems from the fact that incorrect manipulation of parameter d can lead to cross-site scripting...

TOTVS Code Injection Vulnerability

TOTVS is a complete human resource management solution from TOTVS Brazil. A code injection vulnerability exists in TOTVS version 12.1, which stems from the fact that incorrect manipulation of the VIEWSTATE parameter can lead to cross-site scripting...

TOTVS Fluig Platform Directory Traversal (CVE-2020-29134)

A directory traversal vulnerability exists in TOTVS Fluig Platform. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

CVE-2020-29134

The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4...

Path traversal

The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4...

CVE-2020-29134

The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4...

CVE-2020-29134

CVE-2020-29134 (Totvs Fluig platform) affects Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4, via a base64-encoded directory traversal in the parameter file. Root cause: path traversal enabling access to filesystem and sensitive files. Impact (as described): reading of sensitive XML files that may...

Fluig 1.7.0 Path Traversal

Exploit Title: Fluig 1.7.0 - Path Traversal Date: 26/11/2020 Exploit Author: Lucas Souza Vendor Homepage: https://www.totvs.com/fluig/ Version: payload.txt curl -s https://raw.githubusercontent.com/lucxssouza/banners/main/xFluig/banner banner -- FUNCTIONS -- function create-payload wordlist.txt...

Totvs TOTVS Fluig 路径遍历漏洞

Totvs TOTVS Fluig is an application from the Portuguese company Totvs. It is used to automate ERP tasks. A path traversal vulnerability exists in TOTVS Fluig Luke 1.7.0 that allows directory traversal via base64 encoded files...

CVE-2020-29134

The TOTVS Fluig platform allows path traversal through the parameter “file = .. /” encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4 Recent assessments: lucxssouza at March 24, 2021 6:54pm UTC reported: Assessed Attacker Value: 5 Assessed Attacker Value:...

Exploit for Path Traversal in Totvs Fluig

Totvs Fluig Platform Fluig is the productivity and...

TOTVS RM PORTAL Cross Site Scripting

TOTVS RM PORTAL Educational - Multiple Cross Site Scripting Vulnerabilities Product web page: www.totvs.com.br Author: vesp3r Email: [email protected] Published: 13/02/2016 Vendor Product Description TOTVS pronounced Totus is a Brazilian software company, with headquarters in Sao Paulo. TOTVS w...

TOTVS ERP Microsiga Protheus buffer overflow

Buffer overflow on network request parsing...

[DCA-2011-0010] TOTVS Microsiga Protheus ERP - Memory Corruption

DCA-2011-0010 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - TOTVS ERP Microsiga Protheus Application Server Vendor Product Description - Software de Gesto - TOTVS - TOTVS is a software company, innovation, relationship and support management, the...

TOTVS ERP Microsiga Protheus 810 - Memory Corruption (Denial of Service)

TOTVS ERP Microsiga Protheus 810 - Memory Corruption Denial of Service source: https://www.securityfocus.com/bid/47342/info TOTVS ERP Microsiga Protheus is prone to a denial-of-service vulnerability due to a memory-corruption issue. An attacker can exploit this issue to crash the affected...

TOTVS ERP Microsiga Protheus 8/10 - Memory Corruption (Denial of Service)

source: https://www.securityfocus.com/bid/47342/info TOTVS ERP Microsiga Protheus is prone to a denial-of-service vulnerability due to a memory-corruption issue. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this...

[DCA-2011-0002]: TOTVS ERP Microsiga Protheus - Users Enumeration

DCA-2011-0002 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - TOTVS ERP Microsiga Protheus Vendor Product Description - Portuguese - Software de Gesto - TOTVS A TOTVS uma empresa de software, inovao, relacionamento e suporte gesto, lder absoluta no...

TOTVS ERP Microsiga Protheus User Enumeration

DCA-2011-0002 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - TOTVS ERP Microsiga Protheus Vendor Product Description - Portuguese - Software de Gestão - TOTVS A TOTVS é uma empresa de software, inovação, relacionamento e suporte à gestão, líder...