26293 matches found
CVE-2025-2877 Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda
A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...
CVE-2025-2877 Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda
A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...
CVE-2025-31453
creationtimestamp| type| source ---|---|--- 2025-03-28 12:27:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9336 2025-03-28 16:04:54+00:00| seen| https://t.me/cvedetector/21428...
CVE-2025-31438
creationtimestamp| type| source ---|---|--- 2025-03-28 12:27:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9325...
CVE-2025-2869
creationtimestamp| type| source ---|---|--- 2025-03-28 11:28:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9316 2025-03-28 13:33:48+00:00| seen| https://t.me/cvedetector/21393 2025-08-10 18:27:45+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:59+00:00| seen|...
WordPress MDJM Event Management plugin <= 1.7.5.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin Mobile DJ Manager versions = 1.7.5.2...
WordPress Event Tickets with Ticket Scanner plugin < 2.5.4 - Arbitrary Tickets Deletion via CSRF vulnerability
Arbitrary Tickets Deletion via CSRF vulnerability discovered by Krugov Artyom in WordPress Plugin Event Tickets with Ticket Scanner versions 2.5.4...
CVE-2025-2167
The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eventslist' shortcodes in all versions up to, and including, 5.9.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-2074
creationtimestamp| type| source ---|---|--- 2025-03-28 08:27:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9291 2025-03-28 11:53:30+00:00| seen| https://t.me/cvedetector/21390...
CVE-2025-27574
creationtimestamp| type| source ---|---|--- 2025-03-28 08:27:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9286 2025-03-28 11:53:22+00:00| seen| https://t.me/cvedetector/21384...
CVE-2025-1762
The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2025-1762
The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2025-1762 Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF
The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2025-1762
The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2025-1762 Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF
The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
SUSE CVE-2025-21889
In the Linux kernel, the following vulnerability has been resolved: perf/core: Add RCU read lock protection to perfiteratectx The perfiteratectx function performs RCU list traversal but currently lacks RCU read lock protection. This causes lockdep warnings when running perf probe with unshare1...
WordPress plugin Event Tickets with Ticket Scanner 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2025-1762: Cross-Site Request Forgery (CSRF)
The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2025-2877: Debug Messages Revealing Unnecessary Information
A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...