CVE-2025-31739: Missing Authorization

Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimalistic Event Manager: from n/a through = 1.1.1...

CVE-2024-47214

A security vulnerability exists in Iglu Server version 0.13.0 and below , a RESTful schema registry. The issue stems from a malicious payload that can render the service completely unresponsive . If the service is not restored, event processing within the pipeline will eventually halt. No specifi...

CVE-2024-47212

An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API endpoint of Iglu Server and can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

CVE-2024-47215

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected latency,...

PT-2025-14806 · Unknown · Iglu Server

Name of the Vulnerable Software and Affected Versions: Iglu Server versions 0.13.0 and below Description: The issue can render Iglu Server completely unresponsive, which would eventually halt event processing in the pipeline if not restored. It involves an authenticated endpoint and is similar to...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

CVE-2024-47217

An issue was discovered in Iglu Server version 0.13.0 and below , a RESTful mode registry open-sourced by Snowplow . The vulnerability involves an authenticated endpoint that can render the service completely unresponsive . If the server's operation is not restored, event processing in the pipeli...

PT-2025-14731 · Unknown · Minimalistic Event Manager

Name of the Vulnerable Software and Affected Versions: Minimalistic Event Manager versions 1.1.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.1...

CVE-2024-47213

An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted...

CVE-2023-24428

creationtimestamp| type| source ---|---|--- 2025-04-02 14:33:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10079...

CVE-2025-31595

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdiscover Timeline Event History timeline-event-history allows Stored XSS.This issue affects Timeline Event History: from n/a through = 3.2...

CVE-2025-2513

creationtimestamp| type| source ---|---|--- 2025-04-02 09:34:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10043 2025-04-02 14:59:03+00:00| seen| https://t.me/cvedetector/21859...

CVE-2025-2483

creationtimestamp| type| source ---|---|--- 2025-04-02 09:34:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10040 2025-04-02 14:58:59+00:00| seen| https://t.me/cvedetector/21858...

CVE-2025-0676

creationtimestamp| type| source ---|---|--- 2025-04-02 07:18:48+00:00| seen| https://bsky.app/profile/potato.software/post/3llstvhe2jl2x 2025-04-02 09:01:02+00:00| seen| Telegram/mpFYB-4JgXHM75KT7V0syOZuBsPITcNEg0ye98mgfV1oCE 2025-04-02 09:01:36+00:00| seen|...

PT-2025-27742

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A malicious USB device can send a WMI SWBA EVENTID event from an ath9k htc-managed device before beaconing has been enabled, causing a device-by-zero error in the driver. This can lead...

Citrix Director - Unable to retrieve the list of Connections

Citrix Director does not show any 'Connection' information under 'Filters'. There is an error displayed in Director: "Data source unresponsive or reported an error. View Director server event logs for further information Refer Citrix KB article CTX130320" You can also find an event ID 5 logged by...

PT-2025-22199

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the trace event verifier. The verifier checks the formats of trace events to ensure they do not point to memory that is...

CVE-2025-31462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar cgm-event-calendar allows Reflected XSS.This issue affects CGM Event Calendar: from n/a through = 0.8.5...

CVE-2025-31462 WordPress CGM Event Calendar plugin <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar cgm-event-calendar allows Reflected XSS.This issue affects CGM Event Calendar: from n/a through = 0.8.5...