9780 matches found
CVE-2025-26600
A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: direnv, x509-certificate-exporter, docker-credential-gcr, flannel-cni-plugin, fscrypt, spire-controller-manager, cni-plugins, kube-state-metrics, ytt, sftpgo-plugin-auth, stakater-reloader, kaniko, secrets-store-csi-driver-provider-aws, openbao-k8s, aws-flb-firehose,...
UBUNTU-CVE-2025-26600
A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...
X.Org和Xwayland 资源管理错误漏洞
X.Org is an open source free software from the X.Org Foundation.Xwayland is an open source communication protocol from Xwayland that specifies how a display server communicates with its clients. A resource management error vulnerability exists in X.Org and Xwayland that stems from a device being...
CVE-2025-1616
creationtimestamp| type| source ---|---|--- 2025-02-24 04:21:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5124 2025-02-24 06:15:09+00:00| seen| https://t.me/cvedetector/18775 2025-02-24 14:08:42+00:00| seen| Telegram/NEA3MC5jAjQxUYKwMIV4zJTXa0gW1e3ounGPnshffzH2FUaZ...
CVE-2025-1609
creationtimestamp| type| source ---|---|--- 2025-02-24 02:21:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5119 2025-02-24 03:44:39+00:00| seen| https://t.me/cvedetector/18768 2025-02-24 14:08:41+00:00| seen| Telegram/3sGDF6TlOV6rXvZ2XqTyp2NUquiN2QvKXsrQaMYcUVFIikEZ...
CVE-2025-1611
creationtimestamp| type| source ---|---|--- 2025-02-24 02:21:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5117 2025-02-24 03:44:41+00:00| seen| https://t.me/cvedetector/18770 2025-02-24 14:08:41+00:00| seen| Telegram/-go0sESEkldO4oVyrfmbXZdxGzPqWoICYDeQ2WMZ4lZEQERO...
Siemens SIMATIC and SCALANCE Devices Out-of-bounds Write (CVE-2023-5717)
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events perf component can be exploited to achieve local privilege escalation. If perfreadgroup is called while an event's siblinglist is smaller than its child's siblinglist, it can increment or write to memor...
WordPress Events Calendar for GeoDirectory plugin <= 2.3.14 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin Events Calendar for GeoDirectory versions = 2.3.14...
CVE-2024-11260
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the activestatus parameter in all versions up to, and including, 6.6.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
CVE-2024-13802
The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintownevents' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the deserialize method, when handling untrusted XML data, which may contain external entity references. Details XXE Injection is a type of attack against an application that parses XML input. XML is...
CVE-2025-1539
creationtimestamp| type| source ---|---|--- 2025-02-21 15:23:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4903 2025-02-21 16:31:34+00:00| published-proof-of-concept| Telegram/tDCBdMcOgnZL82yA9NlC0UZrhiY4fZOvmxRMeD3Avyss0s 2025-02-21 17:48:35+00:00| seen|...
CVE-2025-1410
creationtimestamp| type| source ---|---|--- 2025-02-21 11:25:04+00:00| seen| https://t.me/cvedetector/18636 2025-02-21 12:35:18+00:00| seen| Telegram/nQmAD97J48Jk1TU13lOVvnLB2LpnfnJ9N9IQeO3-5Nq60jnG...
CVE-2025-1410 Events Calendar Made Simple – Pie Calendar <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piecal Shortcode
The Events Calendar Made Simple – Pie Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's piecal shortcode in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2024-11260
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the activestatus parameter in all versions up to, and including, 6.6.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
CVE-2024-11260
CVE-2024-11260 affects the WordPress plugin Events Manager – Calendar, Bookings, Tickets, and more! The Wordfence summary confirms a time-based SQL Injection via the active_status parameter in all versions up to 6.6.3, caused by insufficient escaping and incomplete query preparation, enabling una...
CVE-2024-11260 Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the activestatus parameter in all versions up to, and including, 6.6.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
WordPress MyTicket Events plugin <= 1.2.4 - Non-Arbitrary File Read vulnerability
Non-Arbitrary File Read vulnerability discovered by Anhchangmutrang in WordPress Plugin MyTicket Events versions = 1.2.4...
CVE-2023-51337
creationtimestamp| type| source ---|---|--- 2025-02-20 20:41:11+00:00| seen| https://t.me/cvedetector/18580 2025-02-20 23:26:56+00:00| seen| Telegram/CUg6iU6vCDPtyKJ8tYNk8BKE2Ho1Ch47Dzmxwlcyk3zZXiL...