Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      The state of DevOps and AI: Not just hype

      September 1, 2025

      A Breeze Of Inspiration In September (2025 Wallpapers Edition)

      August 31, 2025

      10 Top Generative AI Development Companies for Enterprise Node.js Projects

      August 30, 2025

      Prompting Is A Design Act: How To Brief, Guide And Iterate With AI

      August 29, 2025

      Look out, Meta Ray-Bans! These AI glasses just raised over $1M in pre-orders in 3 days

      September 2, 2025

      Samsung ‘Galaxy Glasses’ powered by Android XR are reportedly on track to be unveiled this month

      September 2, 2025

      The M4 iPad Pro is discounted $100 as a last-minute Labor Day deal

      September 2, 2025

      Distribution Release: Linux From Scratch 12.4

      September 1, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      Enhanced Queue Job Control with Laravel’s ThrottlesExceptions failWhen() Method

      September 2, 2025
      Recent

      Enhanced Queue Job Control with Laravel’s ThrottlesExceptions failWhen() Method

      September 2, 2025

      August report 2025

      September 2, 2025

      Fake News Detection using Python Machine Learning (ML)

      September 1, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Installing Proxmox on a Raspberry Pi to run Virtual Machines on it

      September 2, 2025
      Recent

      Installing Proxmox on a Raspberry Pi to run Virtual Machines on it

      September 2, 2025

      Download Transcribe! for Windows

      September 1, 2025

      Microsoft Fixes CertificateServicesClient (CertEnroll) Error in Windows 11

      September 1, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-9738 – Portabilis i-Educar Cross-Site Scripting Vulnerability

    CVE-2025-9738 – Portabilis i-Educar Cross-Site Scripting Vulnerability

    August 31, 2025

    CVE ID : CVE-2025-9738

    Published : Aug. 31, 2025, 5:15 p.m. | 8 hours, 12 minutes ago

    Description : A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educar_tipo_ensino_cad.php. Executing manipulation of the argument nm_tipo can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.

    Severity: 5.1 | MEDIUM

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-9740 – Human Resource Integrated System SQL Injection
    Next Article CVE-2025-9737 – O2OA Cross-Site Scripting Vulnerability

    Related Posts

    Development

    Hacker suspected of trying to cheat his way into university is arrested in Spain

    September 2, 2025
    Development

    ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics

    September 2, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    Best Payment Gateway in Australia: Your Guide

    Development

    Xbox has revealed a new Handheld Compatibility Program along with the Xbox Ally X release date — it could fix what Steam Deck still gets wrong

    News & Updates

    CVE-2025-4269 – TOTOLINK Log Handler Remote Code Execution Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    8 Best Free and Open Source Graphical Linux Diff Tools

    Linux

    Highlights

    CVE-2012-10028 – Netwin SurgeFTP Command Injection

    August 5, 2025

    CVE ID : CVE-2012-10028

    Published : Aug. 5, 2025, 8:15 p.m. | 3 hours, 10 minutes ago

    Description : Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to `surgeftpmgr.cgi`. This can lead to full remote code execution on the underlying system.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Grand Theft Auto 6 has been DELAYED — will now miss 2025 launch window entirely

    May 2, 2025

    CVE-2025-47575 – Mojoomla School Management SQL Injection

    May 25, 2025

    Are portable AC units viable at home? My verdict after testing one during a heat wave

    June 28, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.