Read the docs

TOOOLS

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

TOOOLS records in CISA KEV

No TOOOLS vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2026-56328 CVE-2026-81674 · GHSA-5w9h-62pq-pj3g

Multiple Vulnerabilities in TOOOLS' iSquad

Priority MEDIUM 49

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00479 Published 2026-08-27 Fixed in 22/07/2026 CWE-89
TI-2026-56327 CVE-2026-81673 · GHSA-jrxj-37q3-93g2

Multiple Vulnerabilities in TOOOLS' iSquad

Priority MEDIUM 49

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00605 Published 2026-08-27 Fixed in 22/07/2026 CWE-89
TI-2026-56326 CVE-2026-81672 · GHSA-67gh-45qv-f464

Multiple Vulnerabilities in TOOOLS' iSquad

Priority MEDIUM 49

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id_video parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00479 Published 2026-08-27 Fixed in 22/07/2026 CWE-89
TI-2026-56329 CVE-2026-81675 · GHSA-cc7j-wc52-pjhx

Multiple Vulnerabilities in TOOOLS' iSquad

Priority MEDIUM 48

The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the id_seccion parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00428 Published 2026-08-27 Fixed in 22/07/2026 CWE-89
TI-2026-56331 CVE-2026-81677 · GHSA-89q2-6fq2-wxfg

Multiple Vulnerabilities in TOOOLS' iSquad

Priority MEDIUM 44

The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of the GET parameter `id_ambito`.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00386 Published 2026-08-27 Fixed in 22/07/2026 CWE-89
TI-2026-56330 CVE-2026-81676 · GHSA-vwjv-vcjm-rxvp

Multiple Vulnerabilities in TOOOLS' iSquad

Priority MEDIUM 44

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the `limit_videos` parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0047 Published 2026-08-27 Fixed in 22/07/2026 CWE-89
Open these records in search →