https://db.gcve.eu/sightings/feed 2026-05-09T22:39:47.031334+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/12ac61a2-e58b-431b-ba65-dade12fa5225/export 2026-05-09T22:39:47.578855+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "12ac61a2-e58b-431b-ba65-dade12fa5225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-29782", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7635", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29782\n\ud83d\udd25 CVSS Score: 6.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: WeGIA is Web manager for charitable institutions A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `adicionar_tipo_docs_atendido.php` endpoint in versions of the WeGIA application prior to 3.2.17. This vulnerability allows attackers to inject malicious scripts into the `tipo` parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. Version 3.2.17 contains a patch for the issue.\n\ud83d\udccf Published: 2025-03-14T19:05:40.774Z\n\ud83d\udccf Modified: 2025-03-14T19:05:40.774Z\n\ud83d\udd17 References:\n1. https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5x5w-5c99-vr8h\n2. https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/v3.2.17", "creation_timestamp": "2025-03-14T19:45:05.000000Z"} 2025-03-14T19:45:05+00:00 https://db.gcve.eu/sighting/dc0f7702-ab32-455d-ad0f-c1a16c396a5c/export 2026-05-09T22:39:47.578764+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "dc0f7702-ab32-455d-ad0f-c1a16c396a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-29782", "type": "seen", "source": "https://t.me/cvedetector/20327", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-29782 - WeGIA Web Manager for Charitable Institutions Stored Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2025-29782 \nPublished : March 14, 2025, 7:15 p.m. | 21\u00a0minutes ago \nDescription : WeGIA is Web manager for charitable institutions A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `adicionar_tipo_docs_atendido.php` endpoint in versions of the WeGIA application prior to 3.2.17. This vulnerability allows attackers to inject malicious scripts into the `tipo` parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. Version 3.2.17 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"14 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T20:53:36.000000Z"} 2025-03-14T20:53:36+00:00 https://db.gcve.eu/sighting/de85ff66-21d5-4609-b67a-235421c0f0a5/export 2026-05-09T22:39:47.575721+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "de85ff66-21d5-4609-b67a-235421c0f0a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-29782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkemn3vz7h2s", "content": "", "creation_timestamp": "2025-03-14T22:06:23.260837Z"} 2025-03-14T22:06:23.260837+00:00