GHSA-9MP4-77WG-RWX9 @clerk/backend Performs Insufficient Verification of Data Authenticity

Impact Applications that use the verifyWebhook helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed webhook events. Patches @clerk/backend: the helper has been patched as of 2.4.0 @clerk/astro: the helper has been patched as of 2.10.2 @clerk/express: the helper...

RHSA-2024:2995

creationtimestamp| type| source ---|---|--- 2025-07-09 08:16:37+00:00| seen| Telegram/XZHTf4NyH0IUfb7JBSkfeY-V5gdAgpgyTYOE-dPxYA7Dl08 2025-07-09 08:16:38+00:00| seen| Telegram/QV3UL48CS8kk6aT1hIs-VQeO1cVf8NERWHJOl5ZjHTG3UfE 2025-07-09 08:16:40+00:00| seen|...

RHSA-2024:2169

creationtimestamp| type| source ---|---|--- 2025-07-09 08:16:36+00:00| seen| Telegram/JAzXA9OAAqKOKGEuXxc6anAf58JdbuysZEPNIlNu9keLx0 2025-07-09 08:16:37+00:00| seen| Telegram/XZHTf4NyH0IUfb7JBSkfeY-V5gdAgpgyTYOE-dPxYA7Dl08 2025-07-09 08:16:38+00:00| seen|...

PT-2025-28967 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress versions prior to 7.0.4 Description: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is susceptible to Stored Cross-Site Scripting...

PT-2025-28965 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress versions prior to 7.0.4 Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress version 6.6.5 Description: The Events Manager plugin for WordPre...

Official Clerk JavaScript SDKs 数据伪造问题漏洞

Official Clerk JavaScript SDKs is a Clerk open source official Javascript repository for Clerk authentication. A data forgery vulnerability exists in the Official Clerk JavaScript SDKs, which stems from insufficient verifyWebhook validation and may result in the acceptance of unsigned webhook...

WordPress plugin Events Manager SQL注入漏洞

WordPress Events Manager plugin is a full-featured event management tool that supports event registration, ticket sales, booking management and recurring event settings. The WordPress Events Manager plugin suffers from a SQL injection vulnerability that stems from the plugin's failure to adequate...

PT-2025-28966 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress versions prior to 7.0.4 Description: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is susceptible to Reflected Cross-Site Scriptin...

WordPress plugin Events Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Events Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

RHSA-2024:6576

creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:11+00:00| seen| Telegram/xz2mmH5nmIWrLJp0VXaeukJpqyU7ikcVL-1Te4VH0IBdQ0 2025-07-05 06:11:35+00:00| seen| Telegram/WxoSytSs8Fl40qZITd-i05zi6GItywBUr-TJik2yh5HrF8...

RHSA-2024:9093

creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:03+00:00| seen| Telegram/WfJc7uPRoLJrV4N04ab0I6vzm3GHF9Cjyp48UCO6YlWFjs 2025-07-05 03:15:05+00:00| seen| Telegram/RHkgF7skTMhGpb13BzAtFn3sG2C9DjYxigsVldo5V7Ki1OA 2025-07-05 03:15:05+00:00| seen|...

RHSA-2024:3258

creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:03+00:00| seen| Telegram/WfJc7uPRoLJrV4N04ab0I6vzm3GHF9Cjyp48UCO6YlWFjs 2025-07-05 03:15:05+00:00| seen| Telegram/RHkgF7skTMhGpb13BzAtFn3sG2C9DjYxigsVldo5V7Ki1OA 2025-07-05 03:15:05+00:00| seen|...

PT-2025-27658 · Unknown · Secret Server

Name of the Vulnerable Software and Affected Versions: Secret Server versions 11.7.49 and earlier Description: The distributed engine of Secret Server can be exploited during an initial authorization event, allowing an attacker to impersonate another distributed engine. Recommendations: For Secre...

CVE-2025-2171

creationtimestamp| type| source ---|---|--- 2025-06-23 14:45:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19213 2025-06-23 15:31:00+00:00| published-proof-of-concept| Telegram/S7RPzkaVu9rMwdZrCAlLyJw5bBMvrbhCFuoMTi2UNDrM6ko 2025-06-24 07:20:07+00:00| seen|...

RHSA-2025:9304

creationtimestamp| type| source ---|---|--- 2025-06-23 06:45:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19181 2025-06-23 06:45:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19182 2025-06-23 06:45:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19183 2025-06-23...

Improper Access Control in Socket.IO Event Handlers Allows Unauthenticated Execution of Sensitive Actions

1. Summary Vulnerability: Unauthenticated Access to Sensitive Socket.IO Events Affected Component: lollmsgenerationevents.py in the lollms server Root Cause: Sensitive actions exposed via Socket.IO events lack authentication and authorization checks, and the application relies on insecure global...

Systems-Theoretic and Data-Driven Security Analysis in ML-enabled Medical Devices

The integration of AI/ML into medical devices is rapidly transforming healthcare by enhancing diagnostic and treatment facilities. However, this advancement also introduces serious cybersecurity risks due to the use of complex and often opaque models, extensive interconnectivity, interoperability...

SmartGuard: Leveraging Large Language Models for Network Attack Detection through Audit Log Analysis and Summarization

End-point monitoring solutions are widely deployed in today's enterprise environments to support advanced attack detection and investigation. These monitors continuously record system-level activities as audit logs and provide deep visibility into security events. Unfortunately, existing methods ...

CVE-2025-32510

Unrestricted Upload of File with Dangerous Type vulnerability in ovatheme Ovatheme Events Manager ova-events-manager allows Using Malicious Files.This issue affects Ovatheme Events Manager: from n/a through = 1.8.4...