9809 matches found
WordPress plugin Community Events SQL注入漏洞
WordPress Community Events plugin is an event management plugin on the WordPress platform , mainly used to create and display the event calendar , support for AJAX dynamic loading and event submission form features . WordPress Community Events plugin suffers from a SQL injection vulnerability tha...
WordPress Community Events plugin <= 1.5.4 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Community Events versions = 1.5.4...
CVE-2025-63811 vulnerabilities
Vulnerabilities for packages: bento, cluster-api-aws-controller, splunk-otel-collector, grafana-alloy, argo-events, opentelemetry-collector-contrib, jitsucom-bulker, amazon-cloudwatch-agent, sqlexporter...
GHSA-9MJ6-HXHV-W67J vulnerabilities
Vulnerabilities for packages: bento, cluster-api-aws-controller, splunk-otel-collector, grafana-alloy, argo-events, opentelemetry-collector-contrib, jitsucom-bulker, amazon-cloudwatch-agent, sqlexporter...
CVE-2025-63811 vulnerabilities
Vulnerabilities for packages: argo-events-fips, vault, amazon-cloudwatch-agent-fips, jitsucom-bulker, opentelemetry-collector-contrib, telegraf, sqlexporter, vault-fips, bento, dapr, splunk-otel-collector-fips, splunk-otel-collector, sqlexporter-fips, amazon-cloudwatch-agent, dapr-fips,...
GHSA-9MJ6-HXHV-W67J vulnerabilities
Vulnerabilities for packages: argo-events-fips, vault, amazon-cloudwatch-agent-fips, jitsucom-bulker, opentelemetry-collector-contrib, telegraf, sqlexporter, vault-fips, bento, dapr, splunk-otel-collector-fips, splunk-otel-collector, sqlexporter-fips, amazon-cloudwatch-agent, dapr-fips,...
WordPress Booking Manager plugin cross-site scripting vulnerability
WordPress Booking Manager plugin is a tool for managing appointments and schedules, supporting features such as synchronization with external ICS calendars, importing events and exporting booking data. A cross-site scripting vulnerability exists in the WordPress Booking Manager plugin, which stem...
BIT-MOODLE-2025-62400 Moodle: hidden group names visible to event creators
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information...
More Prompt||GTFO
The next three in this series on online events highlighting interesting uses of AI in cybersecurity are online: 4, 5, and 6. Well worth watching...
Mattermost does not enforce MFA on WebSocket connections
Mattermost versions 11 fail to enforce multi-factor authentication on WebSocket connections which allows unauthenticated users to access sensitive information via WebSocket events...
CVE-2025-64444
creationtimestamp| type| source ---|---|--- 2025-11-14 06:01:56+00:00| seen| https://infosec.exchange/users/offseq/statuses/115546529134205370 2025-11-14 06:01:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m5kyy47h772s 2025-11-14 06:41:18+00:00| seen|...
SUSE CVE-2025-40160
In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...
CVE-2025-36236
creationtimestamp| type| source ---|---|--- 2025-11-13 22:22:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115544721445633757 2025-11-13 22:31:01+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5k7qxvywrw2 2025-11-13 22:56:57+00:00| seen|...
CVE-2025-40122
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2024-26596)
net: dsa: netdevpriv dereference before check on non-DSA netdevice events. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503958;...
Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2023-52675)
In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in updateeventsingroup kasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure. This plugin only works with Tenable.ot. Please visit...
DEBIAN-CVE-2025-40196
In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...
UBUNTU-CVE-2025-40196
In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...
CVE-2025-11367
creationtimestamp| type| source ---|---|--- 2025-11-12 20:01:34+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hgvruz7az2 2025-11-12 20:39:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hj3xk3v52x 2025-11-13 04:32:22+00:00| seen|...
EUVD-2025-124923
In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...