CVE-2025-62178 WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido'

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /html/atendido/cadastroatendidoparentescopessoanova.php endpoint of the WeGIA application. This vulnerability...

PT-2025-41815

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.1 Description WeGIA is a Web Manager for Institutions. A SQL Injection issue exists in the /html/funcionario/dependente listar.php API endpoint, specifically through the id funcionario parameter. Successful...

PT-2025-41820

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.0 Description WeGIA is a web management application designed for institutions, primarily targeting Portuguese language users. A Reflected Cross-Site Scripting XSS issue exists in the application. Attackers can injec...

PT-2025-41821

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.1 Description WeGIA is a Web Manager for Institutions. A SQL Injection issue exists in the /html/funcionario/dependente documento.php API endpoint, specifically through the id dependente parameter. Successful...

PT-2025-41817

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.1 Description WeGIA is a Web Manager for Institutions. A SQL Injection issue exists in the /html/funcionario/cadastro funcionario pessoa existente.php API endpoint, specifically affecting the cpf parameter. Successf...

PT-2025-41816

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.1 Description WeGIA is a web management application for institutions. A Reflected Cross-Site Scripting XSS issue exists in the /html/atendido/cadastro atendido parentesco pessoa nova.php API endpoint. Attackers can...

EUVD-2020-5774

Malware in sbrugna...

EUVD-2013-5828

Malware in sbrugna...

EUVD-2019-19090

Malware in sbrugna...

EUVD-2008-0440

Malware in sbrugna...

EUVD-2010-2672

Malware in sbrugna...

EUVD-2017-9076

Malware in sbrugna...

CVE-2025-61603

WeGIA is a Web manager for charitable institutions. Versions 3.4.12 and below include an SQL Injection vulnerability which was identified in the /controle/control.php endpoint, specifically in the descricao parameter. This vulnerability allows attackers to execute arbitrary SQL commands,...

EUVD-2025-8515

Malicious code in bioql PyPI...

EUVD-2025-2659

Malicious code in bioql PyPI...

EUVD-2022-34682

Malicious code in bioql PyPI...

EUVD-2021-9054

Malicious code in bioql PyPI...

EUVD-2025-8513

Malicious code in bioql PyPI...

EUVD-2021-32594

Malicious code in bioql PyPI...

EUVD-2021-9065

Malicious code in bioql PyPI...