CVE-2025-30832

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themifyme Themify Event Post themify-event-post allows DOM-Based XSS.This issue affects Themify Event Post: from n/a through = 1.3.2...

CVE-2025-30831

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in themifyme Themify Event Post themify-event-post allows PHP Local File Inclusion.This issue affects Themify Event Post: from n/a through = 1.3.2...

CVE-2025-31373

creationtimestamp| type| source ---|---|--- 2025-03-29 04:28:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9532 2025-03-29 06:18:03+00:00| seen| https://t.me/cvedetector/21493...

CVE-2025-31116

creationtimestamp| type| source ---|---|--- 2025-03-29 00:38:44+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-fcfq-m8p6-gw56 2025-03-31 17:31:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9716...

CVE-2025-2923

creationtimestamp| type| source ---|---|--- 2025-03-28 21:56:22+00:00| seen| https://t.me/cvedetector/21466...

CVE-2024-4857

creationtimestamp| type| source ---|---|--- 2025-03-28 20:28:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9455...

CVE-2025-2914

creationtimestamp| type| source ---|---|--- 2025-03-28 20:16:02+00:00| seen| https://t.me/cvedetector/21460...

CVE-2023-52352

creationtimestamp| type| source ---|---|--- 2025-03-28 19:29:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9444...

CVE-2022-41017

creationtimestamp| type| source ---|---|--- 2025-03-28 18:28:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9424...

CVE-2025-2921

creationtimestamp| type| source ---|---|--- 2025-03-28 18:28:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9416 2025-03-28 20:16:01+00:00| seen| https://t.me/cvedetector/21458...

CVE-2025-26923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through = 5.9.8...

CVE-2025-28899

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in toddhuish WP Event Ticketing wpeventticketing allows Reflected XSS.This issue affects WP Event Ticketing: from n/a through = 1.3.4...

CVE-2025-2915

creationtimestamp| type| source ---|---|--- 2025-03-28 17:28:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9411 2025-03-28 20:16:03+00:00| seen| https://t.me/cvedetector/21461...

CVE-2022-40992

creationtimestamp| type| source ---|---|--- 2025-03-28 16:28:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9394...

CVE-2025-30211

creationtimestamp| type| source ---|---|--- 2025-03-28 15:28:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9379 2025-03-28 17:45:16+00:00| seen| https://t.me/cvedetector/21437...

GHSA-76G3-38JV-WXH4 tough timestamp metadata is cached when it fails snapshot rollback check

Summary TUF repositories use the timestamp role to protect against rollback events by enabling an automated process to periodically sign the role's metadata. While tough will ensure that the version of snapshot metadata in new timestamp metadata files was always greater than or equal to the...

CVE-2025-2877

A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...

CVE-2025-2877 Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda

A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...

CVE-2025-2877

Summary: CVE-2025-2877 concerns Red Hat Ansible Automation Platform’s Event-Driven Ansible where, in configurations with verbosity set to debug, inventory passwords are exposed in plain text during rulebook activations and related Event Streams. Affected scope (from connected docs): Red Hat Ansib...

CVE-2025-2877 Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda

A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...