We have everything you need to make storing with us a wonderful experience and a smart choice to make your life easier.
Somos uma empresa de soluções logísticas integradas que hoje movimenta combustíveis, biocombustíveis, químicos, petroquímicos e óleos vegetais, além de mantermos a posição de liderança entre as empresas independentes de armazenagem de granéis líquidos do país. Contamos com mais de 900 colaboradores e somamos mais de 58 anos de história. Fazemos parte do Ultra, um dos maiores grupos empresariais brasileiros. Com mais de 1 milhão de metros cúbicos de capacidade estática, contamos com terminais de granéis líquidos em quatro regiões brasileiras e estamos conectados aos modais rodoviário, ferroviário, hidroviário e dutoviário. Nossos terminais estão localizados em Rondonópolis (MT) e nos Portos de Santos (SP), Rio de Janeiro (RJ), Aratu (BA), Suape (PE), Itaqui (MA) e Vila do Conde (PA). Temos 50% de participação na Opla, que opera um terminal de etanol em Paulínia (SP) e iniciamos a construção de um novo terminal em Palmeirante (TO). Venha fazer parte do nosso time!
Security & Compliance Standards Overview
No incidents recorded for HOMEBOX in 2025.
No incidents recorded for Ultracargo in 2025.
HOMEBOX cyber incidents detection timeline including parent company and subsidiaries
Ultracargo cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number or size of the files it will combine, which allows remote attackers to create very large responses that lead to a denial of service attack via the URL query string.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.
