WordPress Another Events Calendar Plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Another Events Calendar versions = 1.7.0...

CVE-2024-6538

creationtimestamp| type| source ---|---|--- 2025-03-12 05:41:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7286 2025-04-26 04:07:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13562...

Apache NiFi 安全漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A security vulnerability exists in Apache NiFi versions 1.13.0 through 2.2.0, which stems from the possibility that...

CVE-2025-27396

creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:11+00:00| seen| Telegram/BUC-FpXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc 2025-03-11 11:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114143638979930528 2025-03-11 12:35:48+00:00| seen|...

RHSA-2024:8994

creationtimestamp| type| source ---|---|--- 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358...

RHSA-2024:8675

creationtimestamp| type| source ---|---|--- 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358...

RHSA-2024:8707

creationtimestamp| type| source ---|---|--- 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358...

RHSA-2025:2449

creationtimestamp| type| source ---|---|--- 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358 2025-04-26 04:07:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13563...

PT-2025-11109 · Apache · Apache Nifi

Name of the Vulnerable Software and Affected Versions: Apache NiFi versions 1.13.0 through 2.2.0 Description: The issue concerns the inclusion of sensitive authentication credentials, specifically the username and password used to connect to MongoDB, in the NiFi provenance events generated by...

xorg: xwayland: Use-after-free in PlayReleasedEvents()

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

xorg: xwayland: Use-after-free in PlayReleasedEvents()

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

CVE-2025-2147

creationtimestamp| type| source ---|---|--- 2025-03-10 12:02:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6991 2025-03-10 14:45:05+00:00| seen| Telegram/Re7mY14AL9QkSLpTVU6MU1kI9dIUJR83F9d4ZtN-iRB4xwAi 2025-03-10 14:51:36+00:00| seen| https://t.me/cvedetector/19953...

GHSA-93HQ-5WGC-JC82

creationtimestamp| type| source ---|---|--- 2025-03-08 08:26:19+00:00| seen| https://gist.github.com/AsheshT/b8015f15c7f62ad003914be863360ef1 2025-03-08 17:17:34+00:00| seen| https://gist.github.com/AsheshT/8cd4871fc35adf6c9c27adb10ca895ab 2025-09-05 02:28:05+00:00| seen|...

CVE-2025-25617

creationtimestamp| type| source ---|---|--- 2025-03-07 18:17:19+00:00| seen| https://t.me/cvedetector/19833 2025-03-08 04:35:51+00:00| seen| Telegram/xujHTXledlSlp-VdzuIMRUAerSl4-NwPM44rIJbyF3PW2D6...

CVE-2025-27518

creationtimestamp| type| source ---|---|--- 2025-03-07 18:17:17+00:00| seen| https://t.me/cvedetector/19830 2025-03-07 22:35:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6900 2025-03-08 04:35:51+00:00| seen| Telegram/6dZxXuLv-IgV5giZ8ai7Br2Q-GAO7pWWAKqj-9hZGh35uxQ0...

CVE-2025-0337

creationtimestamp| type| source ---|---|--- 2025-03-06 16:33:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6696 2025-03-06 19:41:40+00:00| seen| https://t.me/cvedetector/19721 2025-03-06 19:54:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljqbkhq2j22y 2025-03-08...

PT-2025-20534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the handling of isochronous Ring Underrun/Overrun events in the Linux kernel's xHCI Extensible Host Controller Interface implementation. Specifically, when such an eve...

CVE-2025-27421

Abacus is a highly scalable and stateless counting API. A critical goroutine leak vulnerability has been identified in the Abacus server's Server-Sent Events SSE implementation. The issue occurs when clients disconnect from the /stream endpoint, as the server fails to properly clean up resources...

CVE-2025-26967

Deserialization of Untrusted Data vulnerability in Stiofan Events Calendar for GeoDirectory events-for-geodirectory allows Object Injection.This issue affects Events Calendar for GeoDirectory: from n/a through = 2.3.14...

CVE-2025-26586

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in abelony Events Planner events-planner allows Reflected XSS.This issue affects Events Planner: from n/a through = 1.3.10...