https://vulnerability.circl.lu/sightings/feed 2026-07-17T22:06:54.401921+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a1162b1f-a761-456d-aed3-2fe1ca9f3924/export 2026-07-17T22:06:54.421794+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a1162b1f-a761-456d-aed3-2fe1ca9f3924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24020", "type": "seen", "source": "Telegram/sKUMLDmYXnDHve4JmLEBLdtZC_gEIW0RhqFPh5p2kR9HY5P1", "content": "", "creation_timestamp": "2025-02-14T10:09:22.000000Z"} 2025-02-14T10:09:22+00:00 https://vulnerability.circl.lu/sighting/b1df0c19-2464-4d16-8b73-4624010c239a/export 2026-07-17T22:06:54.425248+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b1df0c19-2464-4d16-8b73-4624010c239a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgbptfxezz2y", "content": "", "creation_timestamp": "2025-01-21T20:44:51.576405Z"} 2025-01-21T20:44:51.576405+00:00 https://vulnerability.circl.lu/sighting/b2111441-c661-4748-a0ca-1e02846e4995/export 2026-07-17T22:06:54.425396+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b2111441-c661-4748-a0ca-1e02846e4995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24020", "type": "seen", "source": "https://t.me/cvedetector/15986", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-24020 - WeGIA Open Redirect Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-24020 \nPublished : Jan. 21, 2025, 6:15 p.m. | 37\u00a0minutes ago \nDescription : WeGIA is a Web manager for charitable institutions. An Open Redirect vulnerability was identified in the `control.php` endpoint of versions up to and including 3.2.10 of the WeGIA application. The vulnerability allows the `nextPage` parameter to be manipulated, redirecting authenticated users to arbitrary external URLs without validation. The issue stems from the lack of validation for the `nextPage` parameter, which accepts external URLs as redirection destinations. This vulnerability can be exploited to perform phishing attacks or redirect users to malicious websites. Version 3.2.11 contains a fix for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"21 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T20:19:08.000000Z"} 2025-01-21T20:19:08+00:00 https://vulnerability.circl.lu/sighting/2b61c704-e8a1-44cc-8af5-540e57abbf62/export 2026-07-17T22:06:54.425521+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2b61c704-e8a1-44cc-8af5-540e57abbf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24020", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbhkcds3x2e", "content": "", "creation_timestamp": "2025-01-21T18:16:35.418956Z"} 2025-01-21T18:16:35.418956+00:00 https://vulnerability.circl.lu/sighting/7c0d62f2-d82c-49ee-94e9-704ea2b42358/export 2026-07-17T22:06:54.425635+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7c0d62f2-d82c-49ee-94e9-704ea2b42358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24020", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2430", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24020\n\ud83d\udd39 Description: WeGIA is a Web manager for charitable institutions. An Open Redirect vulnerability was identified in the `control.php` endpoint of versions up to and including 3.2.10 of the WeGIA application. The vulnerability allows the `nextPage` parameter to be manipulated, redirecting authenticated users to arbitrary external URLs without validation. The issue stems from the lack of validation for the `nextPage` parameter, which accepts external URLs as redirection destinations. This vulnerability can be exploited to perform phishing attacks or redirect users to malicious websites. Version 3.2.11 contains a fix for the issue.\n\ud83d\udccf Published: 2025-01-21T17:51:16.698Z\n\ud83d\udccf Modified: 2025-01-21T17:51:16.698Z\n\ud83d\udd17 References:\n1. https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-27g8-5q48-xmw6\n2. https://github.com/LabRedesCefetRJ/WeGIA/commit/89d98bf074cebf6c4ed95fca6f64e325c0b1d2f0\n3. https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/v3.2.11", "creation_timestamp": "2025-01-21T18:00:40.000000Z"} 2025-01-21T18:00:40+00:00