← All credits
Marcelo Queiroz
13 vulnerability records and advisories credit this contributor.
CVE-2025-12513
A user with elevated privileges can inject XSS in the Hosts configuration parameters page
CVE-2025-12511
A user with elevated privileges can inject XSS in the DSM Administration’s Extensions configuration page
CVE-2025-12514
A user with elevated privileges is able to introduce a SQL Injection using the Open-tickets Notification rules configuration parameters
CVE-2025-8460
A user with elevated privileges can inject XSS in the Notification rules configuration page
CVE-2025-54890
A user with elevated privileges can inject XSS in the Hostgroups configuration page
CVE-2025-9638
i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel
CVE-2025-8429
A user with elevated privileges can inject XSS in the ACL Action access configuration page
CVE-2025-8430
A user with elevated privileges can inject XSS in the Commands Connectors configuration configuration page
CVE-2025-8459
A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page
CVE-2025-54893
A user with elevated privileges can inject XSS in the Hosts templates configuration page