EUVD-2026-65331

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...

TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...

TYPO3-EXT-SA-2026-023: Broken Access Control in extension "Event management and registration" (sf_event_mgt)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...

CVE-2022-47529

CVE-2022-47529 RSA NetWitness Platform EDR Agent / Controle de Acesso Incorreto - Execução de Código Durante uma auditoria de segurança do agente EDR, descobri um vetor inédito para adulterar o serviço possuindo apenas direitos de usuário padrão, ao mirar um objeto de evento de memória Win32...

SolarWinds Security Event Manager - Unauthenticated RCE

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution. id: CVE-2024-0692 info: name: SolarWinds Security Event Manager - Unauthenticated RCE...

SysmonEoP

SysmonEoP Proof of Concept per l'eliminazione/scrittura arbitraria di file in Sysmon CVE-2022-41120/CVE-2022-44704 Vulnerabilità La vulnerabilità si trova nel codice responsabile dell'evento ClipboardChange, raggiungibile tramite RPC. Gli utenti locali possono inviare dati al server RPC, che...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

CVE-2026-22015-Serverless-Function-Environment-Variable-Injection-via-Event

CVE-2026-22015 – Iniezione di variabili d'ambiente in funzione serverless tramite evento Codice del programma simulazione Python Lambda root@kitploit: lambdaenvinject.py - Vulnerable function that reads env from event import os, json def handlerevent, context: The event contains environment...

TelemetrySource

TelemetrySource Progetto creato per mappare le funzioni responsabili dell'attivazione degli eventi provenienti da varie fonti di telemetria. Foglio di mappatura principale: Event Mapping Google Sheet Fonti attualmente mappate: Sysmon Eventi di Sicurezza di Windows...

CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle

10. CVE-2026-9998 – Deserializzazione non sicura nell'oracolo blockchain Panoramica Un nodo oracolo blockchain deserializza i dati da un evento di smart contract utilizzando pickle di Python, consentendo a un attaccante di eseguire comandi arbitrari. Gravità: Critica Compromissione completa del...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

CVE-2026-10627

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.4.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

evtx-baseline

evtx-baseline Un repository che ospita esempi di log evtx goodware con installazioni di software campione e interazioni utente di base Donazioni win10-client.tgz di @phantinuss win11-client.tgz di @frack113 win7-x86.tgz di @pH-T win2022-evtx.tgz di @Neo23x0 win2022-ad.tgz di @frack113...

EUVD-2026-65170

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...

CVE-2026-78263

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2026-78263 WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...

CVE-2026-78263

Event Tickets WordPress plugin versions

CVE-2019-10779

CVE-2019-10779 GCHQ Stroom è vulnerabile a Cross-Site Scripting a causa della possibilità di caricare la dashboard di Stroom su un altro sito e di una protezione insufficiente contro le origini degli eventi della finestra...

CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl

CVE-2026-56423 — MISP deleteSelection Fehlerhafte Zugriffskontrolle Proof of Concept für eine fehlende Autorisierungsschwachstelle in MISPs Massenlöschungsvorgängen für Event Reports und Sharing Groups. Die deleteSelection-Handler autorisieren jedes ausgewählte Element mit einem Callback, der das...