RHSA-2025:0774

creationtimestamp| type| source ---|---|--- 2025-01-29 10:10:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3368 2025-02-26 14:25:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5493...

CVE-2024-54539

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to capture keyboard events from the lock screen...

CVE-2024-54539

This CVE-2024-54539 affects macOS and is addressed by patches in macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. The underlying issue is described as improved state management that prevents an app from capturing keyboard events from the lock screen. Affected components are not ...

CVE-2024-54539

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to capture keyboard events from the lock screen...

GHSA-2V3R-GVQ5-QQGH Dolibarr Cross-site Scripting vulnerability

A cross-site scripting XSS vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

Dolibarr Cross-site Scripting vulnerability

A cross-site scripting XSS vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

CVE-2024-55227

A cross-site scripting XSS vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

UBUNTU-CVE-2024-55227

A cross-site scripting XSS vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

CVE-2025-24537

Cross-Site Request Forgery CSRF vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site Request Forgery.This issue affects The Events Calendar: from n/a through = 6.7.0...

CVE-2025-24537 WordPress The Events Calendar plugin <= 6.7.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site Request Forgery.This issue affects The Events Calendar: from n/a through = 6.7.0...

CVE-2025-24537

The CVE-2025-24537 CSRF vulnerability affects WordPress The Events Calendar (the-events-calendar) up to and including version 6.7.0. Multiple sources (NVD, Red Hat, CVE List, CNNVD, CIRCL, etc.) confirm Cross-Site Request Forgery exposure. Root cause details are not fully disclosed in the provide...

CVE-2025-24537 WordPress The Events Calendar plugin <= 6.7.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site Request Forgery.This issue affects The Events Calendar: from n/a through = 6.7.0...

CVE-2024-12321

creationtimestamp| type| source ---|---|--- 2025-01-27 06:02:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113898798705820695 2025-01-27 06:06:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113898815672458082 2025-01-27 06:15:46+00:00| seen|...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.2, which originates from an application that may be able to capture keyboard events from the lock screen...

WordPress plugin The Events Calendar 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

Dolibarr 安全漏洞

Dolibarr is a Dolibarr open source application. It can help manage the activities of user organizations. A security vulnerability exists in Dolibarr v21.0.0-beta, which stems from the vulnerability of the Events/Agenda module to a cross-site scripting attack, where an attacker can execute arbitra...

CVE-2024-55227

A cross-site scripting XSS vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

PT-2025-5388 · Unknown · The Events Calendar

Name of the Vulnerable Software and Affected Versions: The Events Calendar versions n/a through 6.7.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where ...

CVE-2024-55227

A cross-site scripting XSS vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

PT-2025-3105 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 21.0.0-beta Description: A cross-site scripting XSS issue in the Events/Agenda module allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter. This enables attackers t...