24601 matches found
PT-2026-8120
In the Linux kernel, the following vulnerability has been resolved: perf: Fix refcount warning on event-mmap count increment When calling refcount inc&event-mmap count inside perf mmap rb, the following warning is triggered: refcount t: addition on 0; use-after-free. WARNING: lib/refcount.c:25 Po...
PT-2026-8053
The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing nonce validation on the event deletion functionality. This makes it possible for unauthenticated attackers to delete arbitrary...
WordPress Scheduler Widget plugin <= 0.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Event Modification vulnerability
Insecure Direct Object Reference to Authenticated Subscriber+ Arbitrary Event Modification vulnerability discovered by MD. TAREQ AHAMED JONY itztrq - Knight Squad in WordPress Plugin Scheduler Widget versions = 0.1.6...
WordPress SEATT: Simple Event Attendance plugin <= 1.5.0 - Cross-Site Request Forgery to Arbitrary Event Deletion vulnerability
Cross-Site Request Forgery to Arbitrary Event Deletion vulnerability discovered by MD. TAREQ AHAMED JONY itztrq - Knight Squad in WordPress Plugin SEATT: Simple Event Attendance versions = 1.5.0...
CVE-2026-26187
creationtimestamp| type| source ---|---|--- 2026-02-13 19:22:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mera4xe4ue27...
Djena_Bertrand
Description This the writeup on the challenges we solved duri...
GHSA-6V2J-VR4H-F632
creationtimestamp| type| source ---|---|--- 2026-02-13 10:40:38+00:00| seen| https://gist.github.com/alon710/f83d4d97a82b23b891984bf8ac3bf1de...
CVE-2026-24044
creationtimestamp| type| source ---|---|--- 2026-02-13 09:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meq5feqddv2f...
GHSA-G966-83W7-6W38
creationtimestamp| type| source ---|---|--- 2026-02-12 19:40:23+00:00| seen| https://gist.github.com/alon710/ddfcc9ce61b90942fef47df753b076d0 2026-02-25 01:08:02+00:00| seen| https://gist.github.com/alon710/b23e84fd74b0099ad7b9c6587db73222...
CVE-2026-2322
creationtimestamp| type| source ---|---|--- 2026-02-12 14:10:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meo6aknzuu2e 2026-02-19 14:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mf7s27slzf2v 2026-03-12 03:00:12+00:00| seen|...
CVE-2025-30269
creationtimestamp| type| source ---|---|--- 2026-02-12 12:28:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menykv7gkn2h...
CVE-2025-48724
creationtimestamp| type| source ---|---|--- 2026-02-12 11:30:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menvbo7kam2o...
CVE-2025-39839
creationtimestamp| type| source ---|---|--- 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...
CVE-2025-64487
creationtimestamp| type| source ---|---|--- 2026-02-12 07:17:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menh5pzd3k25 2026-03-06 20:09:04+00:00| seen| https://github.blog/security/how-to-scan-for-vulnerabilities-with-github-security-labs-open-source-ai-powered-framewo...
GHSA-WVCF-9XM8-7MRG
creationtimestamp| type| source ---|---|--- 2026-02-12 04:00:05+00:00| seen| https://gist.github.com/alon710/9ee8ed6e03428c4711cc07304c9dacce...
GHSA-GF3V-FWQG-4VH7
creationtimestamp| type| source ---|---|--- 2026-02-12 02:10:05+00:00| seen| https://gist.github.com/alon710/acaa62d2c9f4a729ff2d09cb5a58ff4d...
CVE-2026-1495
The vulnerability, if exploited, could allow an attacker with Event Log Reader S-1-5-32-573 privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server...
SUSE CVE-2026-24683
FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...
Inspektor Gadget 安全漏洞
Inspektor Gadget is a set of tools and frameworks developed by Inspektor Gadget Inc. based on eBPF. Inspektor Gadget has a security vulnerability that arises from the string fields generated by eBPF events in list output mode. These strings are rendered onto the terminal without clearing control...