Vulnerabilidades en LabRedesCefetRJ

181 resultados
Análisis Vexday

Das 176 CVEs catalogadas para o LabRedesCefetRJ, nenhuma figura no catálogo CISA KEV, taxa abaixo da média geral do catálogo, e a ausência de PoCs públicas reduz o risco imediato de exploração em massa. No entanto, 60 vulnerabilidades são classificadas como críticas e 21 surgiram nos últimos 90 dias, indicando ritmo de descoberta relevante que exige atenção contínua ao processo de patching. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), sugerindo deficiências sistemáticas na sanitização de entradas que devem ser endereçadas na raiz, no ciclo de desenvolvimento. A CVE mais perigosa no momento, CVE-2025-50201, apresenta EPSS de 0,0488, probabilidade ainda moderada de exploração, mas que justifica priorização dado o contexto crítico do ambiente.

CVE-2025-61605CRITICALWeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php EndpointEPSS 0.4%CVE-2026-54767CRITICALWeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.phpEPSS 0.4%CVE-2025-53527HIGHWeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpointEPSS 0.4%CVE-2025-55168CRITICALWeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`EPSS 0.4%CVE-2026-31894MEDIUMWeGIA affected by arbitrary file read via symlink in backup restoreEPSS 0.4%CVE-2026-54671HIGHWeGIA: Authorization Bypass via Empty Resource Array in InternoControleEPSS 0.4%CVE-2025-22600MEDIUMWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `configuracao_doacao.php` parameter `avulso`EPSS 0.4%CVE-2025-22599MEDIUMWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`EPSS 0.4%CVE-2026-33133HIGHWeGIA has an arbitrary SQL execution vulnerability via crafted backup archiveEPSS 0.4%CVE-2025-53530HIGHWeGIA allows Uncontrolled Resource Consumption via the errorstr parameterEPSS 0.4%CVE-2026-33991HIGHWeGIA has SQL Injection in deletar_tag.phpEPSS 0.4%CVE-2025-53531HIGHWeGIA allows Uncontrolled Resource Consumption via the fid parameterEPSS 0.4%CVE-2026-35395HIGHWeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameterEPSS 0.4%CVE-2026-31895HIGHWeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.phpEPSS 0.4%CVE-2025-53946CRITICALWeGIA vulnerable to SQL Injection in endpoint profile_paciente.php parameter id_fichamedicaEPSS 0.4%CVE-2025-54079CRITICALWeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido'EPSS 0.4%CVE-2026-76634HIGHWeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.phpEPSS 0.4%CVE-2025-59939HIGHWeGIA vulnerable to SQL Injection into method `excluir` of the `ProdutoControle` class in the parameter `id_produto`.EPSS 0.4%CVE-2025-6694MEDIUMLabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scriptingEPSS 0.4%CVE-2025-58454HIGHWeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'listar_despachos.php' parameter 'id_memorando'EPSS 0.4%