1190 matches found
WeGIA 跨站脚本漏洞
WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the adicionarespecie.php endpoint especie parameter, no details of the vulnerability are provided at this...
WeGIA 跨站脚本漏洞
WeGIA is a web manager for welfare organizations from the individual developer Nilson Lazarin. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the cadastroadotante.php endpoint cpf parameter, no details ...
gimmePATz - GitHub Personal Access Token (PAT) Recon Tool 1.0.0
gimmePatz is a recon tool for GitHub PATs. Designed for bug bounty hunters, pentesters and red teams. gimmePatz will tell you what scopes a PAT has, and it will tell you what repositories or GitHub Organizations the PAT is attached to as well...
WeGIA 访问控制错误漏洞
WeGIA is a web manager for welfare organizations. WeGIA has an access control error vulnerability that can be exploited by an attacker to cause an unauthenticated user to access protected functionality...
WeGIA 跨站脚本漏洞
WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the control.php endpoint descricaoemergencia parameter, for which no detailed vulnerability details are...
WakaTime: Not a Vuln: Race Condition Allows Creation of Multiple Organizations with the Same Name
Summary: A race condition vulnerability exists in the organization creation logic that allows an attacker to create multiple organizations with the same name, violating the expected uniqueness constraint enforced by the UI. This could lead to confusion, broken business logic, or potential misuse...
PT-2025-29861 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.5 Description: WeGIA is an open-source web manager designed for Portuguese-speaking users and charitable organizations. A Reflected Cross-Site Scripting XSS vulnerability exists in the cadastro adotante.php endpoin...
Researchers Uncover Batavia Windows Spyware Stealing Documents from Russian Firms
Russian organizations have been targeted as part of an ongoing campaign that delivers a previously undocumented Windows spyware called Batavia. The activity, per cybersecurity vendor Kaspersky, has been active since July 2024. "The targeted attack begins with bait emails containing malicious link...
Batavia spyware steals data from Russian organizations
Introduction Since early March 2025, our systems have recorded an increase in detections of similar files with names like договор-2025-5.vbe, приложение.vbe, and dogovor.vbe translation: contract, attachment among employees at various Russian organizations. The targeted attack begins with bait...
WeGIA 跨站脚本漏洞
WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in novomemorando.php, which can be exploited by an attacker to execute injected scripts in a browser...
WeGIA 安全漏洞
WeGIA is a web manager for welfare organizations. WeGIA suffers from a denial of service vulnerability that stems from the length of the errorstr parameter not being validated, which can be exploited by an attacker to cause a denial of service...
WeGIA 安全漏洞
WeGIA is a web manager for welfare organizations. WeGIA suffers from a denial of service vulnerability that stems from the length of the fid parameter not being validated, which can be exploited by an attacker to cause a denial of service...
WeGIA SQL Injection Vulnerability (CNVD-2025-17294)
WeGIA is a web manager for welfare organizations from the individual developer Nilson Lazarin. WeGIA suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the almox parameter of the /controle/getProdutosPorAlmox.php endpoint. An...
WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17298)
WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in /html/matPat/adicionarunidade.php, no details of the vulnerability are provided at this time...
The Promise and Peril of Digital Security in the Age of Dictatorship
LGBTIQ+ organizations in El Salvador are using technology to protect themselves and create a record of the country’s ongoing authoritarian escalations against their community. It’s not without risks...
June 26, 2025—KB5060826 (OS Builds 22621.5549 and 22631.5549) Preview
None None...
WeGIA 代码注入漏洞
WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file /html/matPat/adicionarcategoria.php, no details of the vulnerability are provided at this time...
WeGIA SQL Injection Vulnerability (CNVD-2025-17301)
WeGIA is a web manager for welfare organizations. WeGIA suffers from an SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in the back-end database...
