CVE-2025-54599

The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, when a victim changes the email address that they have configured. To exploit this, an attacker would create their own account and perform an SSO login. The roo...

CVE-2023-40408

creationtimestamp| type| source ---|---|--- 2025-09-02 08:18:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lxtold3oqeq2 2025-09-02 08:47:11+00:00| seen| https://bsky.app/profile/potato.software/post/3lxtq6eet4i2f...

WordPress Events Addon for Elementor plugin cross-site scripting vulnerability

WordPress Events Addon for Elementor plugin is a plugin designed for Elementor page builder, mainly for creating event websites. The WordPress Events Addon for Elementor plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and...

Linux Distros Unpatched Vulnerability : CVE-2025-22239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arbitrary event injection on Salt Master. The master's minionevent method can be used by and authorized minion to send arbitrary events onto the master's event...

CVE-2025-9786

creationtimestamp| type| source ---|---|--- 2025-09-01 17:29:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxs4vbkb3a2n 2025-09-01 18:44:54+00:00| seen| https://gist.github.com/Darkcrai86/fef81edc661cd377f288e733ec1f4af0...

CVE-2025-20705

creationtimestamp| type| source ---|---|--- 2025-09-01 08:58:31+00:00| seen| https://gist.github.com/Darkcrai86/56c8786e10d97be5fc0f0c4767586a16 2025-09-01 09:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrazkeija2j...

ASB-A-419110583

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2025-38564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Handle buffer mapping fail correctly in perfmmap After successful allocation of a buffer or a successful attachment to an existing buffer perfmmap...

CVE-2011-2432

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:23+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:55+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2011-2097

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:21+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:54+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2011-1270

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:13+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:51+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2017-3062

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:12+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:50+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

Linux Distros Unpatched Vulnerability : CVE-2025-38539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the...

RHSA-2024:3581

creationtimestamp| type| source ---|---|--- 2025-08-30 08:22:52+00:00| seen| Telegram/mvZ8NgsrRYGJqSXeB5hg9rgVW-S0L1quSgwaG7p9hO2SM4Y 2025-10-24 12:48:06+00:00| seen| Telegram/BtAZttkW3tMUhy9LhULplNpp4G9yhOARIInV6G962lOs5w...

RHSA-2023:7464

creationtimestamp| type| source ---|---|--- 2025-08-30 06:21:38+00:00| seen| Telegram/lOFt5OLRJAlPr0fi7wLfL3uH0aeFsM3K6cjq5vC3j0BK7Y 2025-08-30 06:21:43+00:00| seen| Telegram/P8pyY9lc8PIEFYzT3svv95IP2wt6qT0Fm2k3Gq38JxO-o...

RHSA-2023:6667

creationtimestamp| type| source ---|---|--- 2025-08-30 02:22:26+00:00| seen| Telegram/swvvDBr4sLUJpO-Mf1lDD-RcBF5rVCeCsgITXhhnfHg5hTU 2025-08-30 05:19:18+00:00| seen| Telegram/IyktYvz2ZXSoln-Xw9gf7lHEpCZ8IZsKAFgChoCz0-9C5M 2025-08-30 05:19:19+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2022-42316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xenstore: guests can let run xenstored out of memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2022-2630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper access control issue in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.4, all versions from 15.3 before 15.3.2 allows disclosure...

Linux Distros Unpatched Vulnerability : CVE-2021-25743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the...

Linux Distros Unpatched Vulnerability : CVE-2022-42314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xenstore: guests can let run xenstored out of memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities...