98 matches found
CVE-2026-23724
CVE-2026-23724 affects the WeGIA web manager. A Stored Cross‑Site Scripting (XSS) vulnerability exists in the html/atendido/cadastro_ocorrencia.php endpoint where user-controlled data is rendered in the “Atendido” dropdown without sanitization. This could allow injection in Attendido_idatendido f...
CVE-2026-23724 WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page
WeGIA is a web manager for charitable institutions. Prior to 3.6.2, a Stored Cross-Site Scripting XSS vulnerability was identified in the html/atendido/cadastroocorrencia.php endpoint of the WeGIA application. The application does not sanitize user-controlled data before rendering it inside the...
EUVD-2026-2960
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clearOrderLogs function in all versions up to, and including, 5.1.2. This makes it possible for unauthenticated...
CVE-2021-47798
creationtimestamp| type| source ---|---|--- 2026-01-16 02:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcj2fdpcvf2r...
GHSA-H4WG-473G-P5WC
creationtimestamp| type| source ---|---|--- 2026-01-07 19:09:24+00:00| seen| Telegram/og43KH01Plc8Iyz0Ogz7cm1eiVq8-Qgmh5W6-3KZk71D79o...
EUVD-2026-1283
EUVD-2026-1283...
CVE-2025-20805
creationtimestamp| type| source ---|---|--- 2026-01-06 16:03:36+00:00| seen| Telegram/TCex7aZekT09DvEY9wX636dHaOk7Nos7qsus59ia7rYD0xo...
CVE-2025-15206
creationtimestamp| type| source ---|---|--- 2025-12-29 22:31:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5vaidb3u2e 2026-01-07 21:06:47+00:00| seen| Telegram/T-d8xn-TcEPck3DzWCaeuFbHttDufKruTnbtPxUxx-cmwo...
CVE-2025-59949
creationtimestamp| type| source ---|---|--- 2025-12-18 20:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabyndf3zz2c...
CVE-2025-68265
creationtimestamp| type| source ---|---|--- 2025-12-16 16:11:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115730118776750260 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...
CVE-2025-34246
creationtimestamp| type| source ---|---|--- 2025-11-06 21:06:09+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4yhqv2etxd2...
EUVD-2020-3483
Malware in sbrugna...
EUVD-2021-7355
Malicious code in bioql PyPI...
CVE-2025-55835
creationtimestamp| type| source ---|---|--- 2025-09-13 09:01:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lypg4czewp2q...
CVE-2025-9722 Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scripting
A vulnerability has been found in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educartipoocorrenciadisciplinarcad.php. Such manipulation of the argument nmtipo/descricao leads to cross site scripting. It is possible to launch the attack remotel...
CVE-2023-38848
creationtimestamp| type| source ---|---|--- 2025-08-31 07:55:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lxomdlmkges2...
CVE-2025-44178
creationtimestamp| type| source ---|---|--- 2025-08-25 14:40:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115089922710164590...
CVE-2025-24468
creationtimestamp| type| source ---|---|--- 2025-08-23 04:53:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx26hl7wpj2k...