24982 matches found
CVE-2025-47057
creationtimestamp| type| source ---|---|--- 2025-06-11 17:34:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18089...
CVE-2025-48125
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Event Manager WP Event Manager wp-event-manager allows PHP Local File Inclusion.This issue affects WP Event Manager: from n/a through = 3.1.51...
GHSA-J3XV-6967-CV88
creationtimestamp| type| source ---|---|--- 2025-06-11 14:31:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18075 2025-06-11 20:16:04+00:00| published-proof-of-concept| Telegram/ph88y4G5oeScgD258CchMKrpr3BuS4k3KcSxkFOuLvPbbMI...
RUSTSEC-2025-0041 matrix-sdk-crypto vulnerable to encrypted event sender spoofing by homeserver administrator
matrix-sdk-crypto versions 0.8.0 up to and including 0.11.0 does not correctly validate the sender of an encrypted event. Accordingly, a malicious homeserver operator can modify events served to clients, making those events appear to the recipient as if they were sent by another user. Although th...
CVE-2025-45055
Silverpeas 6.4.2 contains a stored cross-site scripting XSS vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attacker...
The vulnerability of the microprogramming software of the Elspec G5 digital event recorder, related to the use of default administrative account information, allows a intruder to gain unauthorized access to the device.
The vulnerability of the microprogramming software of the Elspec G5 digital event recorder is related to the use of default administrative account information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the device...
CVE-2025-46985
creationtimestamp| type| source ---|---|--- 2025-06-10 22:32:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18012...
MAL-2025-191933 Malicious code in win32evtlog (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4aba891520e5d5ae607dd5069c1f70512a339cbfeca374b680328cf1e406d3ad Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...
GHSA-X958-RVG6-956W matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator
Summary matrix-sdk-crypto since version 0.8.0 up to 0.11.0 does not correctly validate the sender of an encrypted event. Accordingly, a malicious homeserver operator can modify events served to clients, making those events appear to the recipient as if they were sent by another user. Although the...
GHSA-9WJ4-8H85-PGRW
creationtimestamp| type| source ---|---|--- 2025-06-10 16:35:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114660037799326357...
CVE-2025-43558
creationtimestamp| type| source ---|---|--- 2025-06-10 16:31:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17919...
CVE-2025-48937
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. matrix-sdk-crypto since version 0.8.0 and up to 0.11.0 does not correctly validate the sender of an encrypted event. Accordingly, a malicious homeserver operator can modify events served to clients, making those event...
CVE-2023-5553
creationtimestamp| type| source ---|---|--- 2025-06-10 14:30:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17886...
CVE-2025-4577
creationtimestamp| type| source ---|---|--- 2025-06-10 11:34:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17868...
Security Bulletin: IBM Event Processing is vulnerable to Server-Side Request Forgery (SSRF) and credential leakage due to the axios package (CVE-2025-27152).
Summary IBM Event Processing is vulnerable to Server-Side Request Forgery SSRF and credential leakage due to the usage of axios package. The axios package is used in event processing to send or retrieve data via HTTP calls, enabling integration with external services or REST APIs during event...
Security Bulletin: IBM Event Streams is vulnerable to Server Side Request Forgery (SSRF) due to the axios component (CVE-2025-27152).
Summary IBM Event Streams is vulnerable to Server Side Request Forgery SSRF due to the axios component. In event streams, axios is used to make HTTP requests to the Event Streams REST Admin API, such as creating or listing Kafka topics. Vulnerability Details CVEID:CVE-2025-27152 DESCRIPTION: axio...
matrix-rust-sdk 安全漏洞
matrix-rust-sdk is a Matrix open source implementation of the Matrix client-server library in Rust. A security vulnerability exists in matrix-rust-sdk versions 0.8.0 through 0.11.0, which stems from insufficient sender authentication and could lead to event tampering...
CVE-2025-49296
creationtimestamp| type| source ---|---|--- 2025-06-09 20:31:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17774...
WordPress WpEvently plugin <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by siavashvafshar in WordPress Plugin WpEvently versions = 4.4.2...