CVE-2026-40283 WeGIA has stored XSS in profile_paciente.php

WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting XSS vulnerability allows an authenticated user to inject malicious JavaScript via the "Nome" field in the "Informações Pacientes" page. The payload is stored and executed when the patien...

CVE-2026-33337

creationtimestamp| type| source ---|---|--- 2026-04-17 19:20:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpngcrnnp2l 2026-04-17 21:22:46+00:00| seen| Telegram/o-uTgZiWLI4DGr-3Qx2v6r5S9u58WJIjtqdTFR62kB0PIWs...

CVE-2026-40525

creationtimestamp| type| source ---|---|--- 2026-04-17 19:20:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpng3yemd2m 2026-04-17 21:22:46+00:00| seen| Telegram/o-uTgZiWLI4DGr-3Qx2v6r5S9u58WJIjtqdTFR62kB0PIWs 2026-05-05 19:37:07+00:00| seen|...

CVE-2026-6491

creationtimestamp| type| source ---|---|--- 2026-04-17 19:05:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpmksr5uf2d...

CVE-2026-6497

creationtimestamp| type| source ---|---|--- 2026-04-17 18:40:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpl62mbf42r...

CVE-2026-6493

creationtimestamp| type| source ---|---|--- 2026-04-17 18:28:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpkjox2mi26...

CVE-2026-21709

creationtimestamp| type| source ---|---|--- 2026-04-17 18:18:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpjwspxx42t...

CVE-2026-5797

creationtimestamp| type| source ---|---|--- 2026-04-17 17:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjphdxzjfv2u...

CVE-2026-40516

creationtimestamp| type| source ---|---|--- 2026-04-17 17:20:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpgpsn7qq2r 2026-04-17 18:36:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpkwey4yv2p 2026-04-17 21:22:23+00:00| published-proof-of-concept|...

CVE-2026-30912

creationtimestamp| type| source ---|---|--- 2026-04-17 16:07:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjpcmn75ci2g 2026-04-18 08:43:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjr2b2je3n2d 2026-04-20 20:14:08+00:00| seen|...

EUVD-2026-23421

PAC4J is vulnerable to Cross-Site Request Forgery CSRF. A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site request with a token whose hash collides with the victim's legitimate CSRF token. Importantly, the...

GHSA-XW5C-JC7X-GF75 PAC4J has a Cross-Site Request Forgery (CSRF) Vulnerability

PAC4J is vulnerable to Cross-Site Request Forgery CSRF. A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site request with a token whose hash collides with the victim's legitimate CSRF token. Importantly, the...

CVE-2026-6488

creationtimestamp| type| source ---|---|--- 2026-04-17 15:03:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp72clfsr2q...

CVE-2026-6486

creationtimestamp| type| source ---|---|--- 2026-04-17 14:27:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp4z6whrh2r...

CVE-2026-35073

creationtimestamp| type| source ---|---|--- 2026-04-17 14:07:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp3vc4msi22...

CVE-2026-35074

creationtimestamp| type| source ---|---|--- 2026-04-17 14:05:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp3shhsjw2f...

CVE-2026-6490

creationtimestamp| type| source ---|---|--- 2026-04-17 14:03:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp3prdfks2t 2026-04-17 15:15:54+00:00| seen| Telegram/QdqC7jGSCv0UhvQQIZV0fKZEeaKKm-4Qa3u49kJ3A7UaYRQ...

CVE-2026-40458 Cross-Site Request Forgery in PAC4J

PAC4J is vulnerable to Cross-Site Request Forgery CSRF. A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site request with a token whose hash collides with the victim's legitimate CSRF token. Importantly, the...

CVE-2026-6507

creationtimestamp| type| source ---|---|--- 2026-04-17 13:17:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjoz5gjsrj24 2026-04-17 14:04:34+00:00| seen| https://bsky.app/profile/clankussy.abu.guru/post/3mjp3quxgvq2w 2026-04-17 14:14:24+00:00| seen|...

CVE-2026-6483

creationtimestamp| type| source ---|---|--- 2026-04-17 13:15:10+00:00| published-proof-of-concept| Telegram/lpEzYizBGkqL1ZKMpOY92cCYkhwEb9D0i1BkdhhDLZinNs0 2026-04-17 14:34:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp5fuv32f2b...