Security Intel Hub 44+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

Clear filters

High

Stored XSS in WeGIA Member Registration (CVE-XXXX-XXXX)

github.com · 2026-04-18

WeGIA <= 3.6.9

Premium intel

Critical

WEiGA SQL Injection via Session Variable Override in DespachoControle.php with POC

github.com · 2026-04-18

WeGIA <= 3.6.9

Medium

Stored XSS in listar_despachos.php: Analysis and POC

github.com · 2026-04-18

WeGIA <= 3.6.9

Premium intel

High

WEZIA SQL Injection Vulnerability in DespachoDAO.php with PoC

github.com · 2026-04-07

WEZIA <= 3.6.8

Premium intel

Critical

WeGIA CVE-2026-28409 RCE via OS Command Injection

CVE-2026-28409 · github.com · 2026-02-28

WeGIA <= 3.6.4

Medium

WeGIA Clickjacking Vulnerability (CVE-2026-23731)

CVE-2026-23731 · github.com · 2026-01-20

WeGIA <= 3.6.1

Unknown

WeGIA control.php Open Redirect Vulnerability (CVE-2026-23730)

CVE-2026-23730 · github.com · 2026-01-20

WeGIA <= 3.6.1

Medium

WeGIA Stored XSS Vulnerability (CVE-2026-23724) with PoC

CVE-2026-23724 · github.com · 2026-01-20

WeGIA <= 3.6.1

Medium

WeGIA Stored XSS Vulnerability (CVE-2026-23725) with PoC

CVE-2026-23725 · github.com · 2026-01-20

WeGIA <= 3.6.1

Medium

WeGIA Open Redirect Vulnerability in control.php (CVSS 4.8) with PoC

github.com · 2026-01-20

WeGIA <= 3.6.1

Medium

Wegia WeGIA Open Redirect Vulnerability Analysis with PoC

github.com · 2026-01-20

WeGIA <= 3.6.1

Critical

WeGIA <=3.6.1 SQL Injection Vulnerability (CVE-2026-23723) with PoC

CVE-2026-23723 · github.com · 2026-01-20

WeGIA <= 3.6.1

Premium intel

CVSS 10.0

WeGIA CVE-2025-58159 Authenticated Arbitrary File Upload Leading To RCE

github.com · 2025-08-31

### Key Information #### Vulnerability Overview - **Vulnerability Name**: Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE) - **Severity**: Critical (10.0/10) - **CVE ID**: CV…

CVSS 6.5

Reflected XSS in WeGIA pre_cadastro_adotante.php (CVE-2025-57765)

github.com · 2025-08-23

### Key Information #### Vulnerability Type - **Cross-Site Scripting (XSS)**: Reflected Cross-Site Scripting #### Affected Endpoint and Parameter - **Affected Endpoint**: `pre_cadastro_adotante.php` -…

WeGIA <=3.4.1 Reflected XSS Vulnerability (CVE-2025-57763)

github.com · 2025-08-23

### Critical Vulnerability Information #### Vulnerability Type - **Cross-Site Scripting (XSS)** #### Affected Package and Versions - **Package**: WeGIA (Composer) - **Affected Versions**: <= 3.4.1 - *…

WeGIA Stored XSS in dependente_docdependente.php (CVE-2025-57762)

github.com · 2025-08-23

### Key Information #### Vulnerability Overview - **Vulnerability Type**: Stored Cross-Site Scripting (XSS) - **Affected Endpoint**: `dependente_docdependente.php` parameter `nome` - **Severity**: Med…

GHSA-494r-43f3 XSS Vulnerability Fix Analysis

github.com · 2025-08-23

From this webpage screenshot, the following key information about the vulnerability can be obtained: - **Vulnerability Type**: XSS (Cross-Site Scripting) - **Vulnerability ID**: GHSA-494r-43f3-p828 - …

CVSS 6.5

WeGIA Reflected XSS Vulnerability (CVE-2025-57764)

github.com · 2025-08-23

### Key Information #### Vulnerability Type - **Cross-Site Scripting (XSS)**: Reflected Cross-Site Scripting #### Affected Package and Versions - **Package**: WeGIA (Composer) - **Affected versions**:…

CVSS 7.5

CVE-2020-55171: WeGIA Unauthenticated Arbitrary File Deletion

github.com · 2025-08-14

### Critical Vulnerability Information #### Vulnerability Description - **Vulnerability Type**: Unauthorized anonymous attackers can delete any image file - **Affected Versions**: <=3.4.7 - **Fixed Ve…

WeGIA Unauthenticated Path Traversal Vulnerability (CVE-2021-55189) with PoC

github.com · 2025-08-14

### Key Information #### Vulnerability Overview - **Vulnerability Type**: Unauthorized Path Traversal - **Affected Endpoint**: `/html/socio/sistema/download_remessa.php` - **Parameter**: `file` #### A…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 44+