63 matches found
CVE-2025-25950
creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6125 2025-03-03 02:58:44+00:00| seen| https://t.me/cvedetector/19281 2025-03-06 02:16:33+00:00| seen| Telegram/LnjyeAvwJZTh3Jc9tcYXlfWG8Jfh8HLDR5AhqYK-Ww9g5pT 2025-08-19...
CVE-2025-25952
creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6123 2025-03-03 02:58:45+00:00| seen| https://t.me/cvedetector/19283 2025-08-19 18:29:28+00:00| seen| MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18...
ChurchCRM EditEventAttendees Feature Blind SQL Injection Vulnerability
ChurchCRM is an open source church management system. ChurchCRM suffers from a blind SQL injection vulnerability that stems from an EID parameter being directly connected to a SQL query without proper cleanup, which can be exploited by an attacker to execute arbitrary SQL queries using a...
CVE-2024-55156
creationtimestamp| type| source ---|---|--- 2025-02-21 18:18:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4937 2025-02-21 19:46:41+00:00| seen| https://t.me/cvedetector/18669 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...
CVE-2024-54961
creationtimestamp| type| source ---|---|--- 2025-02-20 20:41:30+00:00| seen| https://t.me/cvedetector/18593 2025-08-19 18:29:28+00:00| seen| MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18...
CVE-2024-44256
creationtimestamp| type| source ---|---|--- 2024-10-28 23:42:11+00:00| seen| https://t.me/cvedetector/9206 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:29+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...
CVE-2024-36412
creationtimestamp| type| source ---|---|--- 2024-07-17 15:58:21+00:00| published-proof-of-concept| https://t.me/softrinx/424 2024-07-17 15:58:21+00:00| published-proof-of-concept| https://t.me/softrinx/143160 2024-07-17 16:15:23+00:00| published-proof-of-concept| https://t.me/realLulzSec/13806...
PT-2024-34557 · Sourcecodester · Sourcecodester Event Registration System
Name of the Vulnerable Software and Affected Versions: SourceCodester Event Registration System version 1.0 Description: A critical issue affects the processing of the file /classes/Master.php?f=load registration, where the manipulation of the argument last id/event id leads to sql injection. The...
campcodes Complete Web-Based School Management System 安全漏洞
Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System, which results from an SQL injection vulnerability in the eventid paramete...
libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust...
Judging Management System security breach
Judging Management System is a judging management system by Carlo Montero Personal Developer. A security vulnerability exists in Sourcecodester Judging Management System v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary code and obtain sensiti...
PT-2024-12224 · Unknown · Oretnom23 Judging Management System
Name of the Vulnerable Software and Affected Versions: oretnom23 Judging Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the sub event id parameter in the "sub event details edit.php" endpoint...
Citrix Delivery Controllers generates Event ID 505 and Event ID 3602 continuously
Upgrading CVAD version to 2308 generates“Citrix ConfigSync Service” with "Event ID “505 ” and "Citrix High Availability Service" with "Event ID 3602" The Citrix Config Sync Service failed an import. Error details: Error importing configuration data into secondary Broker...
WordPress plugin EventON 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
UBUNTU-CVE-2023-3138
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust...
PT-2023-22584 · Unknown · Judging Management System
Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the event id parameter at the "/php-jms/result sheet.php" API endpoint. Recommendations: For...
SUSE CVE-2006-3474
Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to a gbrowse.php, 2 cardid parameter to b rating.php and c create.php, and the 3 eventid parameter to d search.php...
CVE-2022-24500
creationtimestamp| type| source ---|---|--- 2022-04-13 08:18:48+00:00| seen| https://t.me/itsecnews/474 2022-05-19 03:36:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2227 2022-05-19 06:21:08+00:00| published-proof-of-concept|...
WordPress Wichipi Events Calendar Plugin SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Wachipi WP Events Calendar plugin is used in one of the task calendar plugin. A SQL injection vulnerability exists...