Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when handling private escape commands in event triggers...

Microsoft Windows Event Tracing 资源管理错误漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism to track and log events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to a resource management error. An attacker could exploit the...

The Impact of Event Data Partitioning on Privacy-Aware Process Discovery

Information systems support the execution of business processes. The event logs of these executions generally contain sensitive information about customers, patients, and employees. The corresponding privacy challenges can be addressed by anonymizing the event logs while still retaining utility f...

Asynchronous Event Error-Minimizing Noise for Safeguarding Event Dataset

With more event datasets being released online, safeguarding the event dataset against unauthorized usage has become a serious concern for data owners. Unlearnable Examples are proposed to prevent the unauthorized exploitation of image datasets. However, it's unclear how to create unlearnable...

PT-2025-28559 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing affected versions not specified Description: The issue is related to a use after free condition in Windows Event Tracing, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment,...

Microsoft Windows Event Tracing 安全漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing. An attacker could exploit the...

CVE-2025-53543 Kestra allows Stored XSS before 0.22

Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored XSS due to improper handling of HTTP response received. This vulnerability is fixed in 0.22.0...

CVE-2025-53543

CVE-2025-53543 : Kestra (event-driven orchestration platform) is vulnerable to a stored XSS in the error message shown on the execution “Overview” tab due to improper handling of HTTP responses. This issue is addressed in Kestra 0.22.0 and later. Remediation: upgrade to 0.22.0+ (or apply vendor-p...

CVE-2025-5924

creationtimestamp| type| source ---|---|--- 2025-07-07 15:14:14+00:00| seen| Telegram/ISXgwPdrIpRTPMpLikF2rIbDIPtvkDdpffH6-8WgNXxkQ...

Security Bulletin: IBM Event Endpoint Management is affected by multiple vulnerabilities.

Summary IBM Event Endpoint Management is affected by multiple vulnerabilities. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacker to cause high confidentiality and high integrity impact...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.8.1. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU...

CVE-2025-53176

creationtimestamp| type| source ---|---|--- 2025-07-07 03:16:31+00:00| seen| Telegram/8Ewnkzw9DIHDkQKcwYzcMmCjvUlTjrtXwgbcYnRxhvR7TM...

CVE-2025-22101

creationtimestamp| type| source ---|---|--- 2025-07-06 10:14:31+00:00| seen| Telegram/JbJAn-VIkbx56JH7ETtmEX-I7LpDXJEXr-C309X-JNeua2I...

CVE-2025-27446

creationtimestamp| type| source ---|---|--- 2025-07-06 08:36:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltbujuthim2q 2025-07-06 09:53:06+00:00| seen| https://seclists.org/oss-sec/2025/q3/7 2025-07-06 12:15:45+00:00| seen|...

GHSA-JPXC-VMJF-9FCJ

creationtimestamp| type| source ---|---|--- 2025-07-05 06:11:30+00:00| seen| Telegram/1dqgidmIHf5IJFAriKd5AT3fDWrzJYXTjqmUtpExJFAzqOc...

CVE-2025-53365

creationtimestamp| type| source ---|---|--- 2025-07-05 01:38:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt6mqf23372i 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2026-03-...

CVE-2025-34091

A padding oracle vulnerability exists in Google Chrome’s AppBound cookie encryption mechanism due to observable decryption failure behavior in Windows Event Logs when handling malformed ciphertext in SYSTEM-DPAPI-encrypted blobs. A local attacker can repeatedly send malformed ciphertexts to the...

UBUNTU-CVE-2025-38183

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix potential out-of-bounds write in lan743xptpioeventclockget Before calling lan743xptpioeventclockget, the 'channel' value is checked against the maximum value of PCI11X1XPTPIOMAXCHANNELS8. This seems correct and...

CVE-2025-47634

creationtimestamp| type| source ---|---|--- 2025-07-04 12:13:56+00:00| seen| Telegram/1Sng3tIrau-ifR-iGzkkR2pmqkVifqvtqE6rHfHfpzrzHEc...

The vulnerability in the `fs/tracefs/event inode.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/tracefs/event inode.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...