Vulnerabilities
Patch WeGIA 3.8.6 to Stop Session Hijacking and Internal Host Leakage
A session handling flaw in WeGIA versions prior to 3.8.6 allows session takeover and exposes internal database host names in cookie responses.
LabRedesCefetRJ
Everything BlueTeam Herald has reported about LabRedesCefetRJ: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Upgrade WeGIA to 3.8.6 to stop CVSS 9.8 SQL injection from exposing billing and credentials
A critical SQL injection in WeGIA versions prior to 3.8.6 allows attackers to manipulate billing and credential data without authentication.