CVE-2024-41504 – Jetimob Plataforma Imobiliaria Cross Site Scripting (XSS)

June 10, 2025

CVE ID : CVE-2024-41504

Published : June 10, 2025, 8:15 p.m. | 1 hour, 33 minutes ago

Description : Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). In the “Oportunidades” (opportunities) section of the application when creating or editing an “Atividade” (activity), the form field “Descrico” allows injection of JavaScript.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2024-41505 – Jetimob Plataforma Imobiliaria XSS in Pessoas Profisso Field

Next Article CVE-2024-41502 – Jetimob Plataforma Imobiliaria XSS in Observaces Field

Highlights

CVE-2025-35036 – Apache Hibernate Expression Language Injection Vulnerability

June 3, 2025

CVE ID : CVE-2025-35036

Published : June 3, 2025, 8:15 p.m. | 1 hour, 30 minutes ago

Description : Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

I replaced my Samsung OLED TV with this Sony Mini LED model for a week – and didn’t regret it

I tested the most popular robot mower on the market – and it was a $5,000 crash out

5 gadgets and accessories that leveled up my gaming setup (including a surprise console)

Why I’m patiently waiting for the Samsung Z Fold 8 next year (even though the foldable is already great)

Performance Analysis with Laravel’s Measurement Tools

Performance Analysis with Laravel’s Measurement Tools

Memoization and Function Caching with this PHP Package

Laracon US 2025 Livestream

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

With Windows 10’s fast-approaching demise, this Linux migration tool could let you ditch Microsoft’s ecosystem with your data and apps intact — but it’s limited to one distro

Windows 10 is 10 years old today — let’s look back at 10 controversial and defining moments in its history

CVE-2024-41504 – Jetimob Plataforma Imobiliaria Cross Site Scripting (XSS)

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

Tea App Data Breach: 72,000 Selfies and IDs of Women Leaked Online

GoZen – minimalistic video editor

Prescription for disaster: Sensitive patient data leaked in Ascension breach

CVE-2025-7218 – Campcodes Payroll Management System SQL Injection Vulnerability

b3sum – implementation of the BLAKE3 hash function

CVE-2025-35036 – Apache Hibernate Expression Language Injection Vulnerability

CVE-2025-25217 – Apache OpenHarmony NULL Pointer Dereference DOS

Meta Resumes E.U. AI Training Using Public User Data After Regulator Approval

CVE-2025-4460 – TOTOLINK N150RT Cross-Site Scripting Vulnerability

CVE-2024-41504 – Jetimob Plataforma Imobiliaria Cross Site Scripting (XSS)

Related Posts