9780 matches found
CVE-2025-0173
creationtimestamp| type| source ---|---|--- 2025-01-02 20:06:55+00:00| seen| https://t.me/cvedetector/14188 2025-02-14 09:47:00+00:00| seen| Telegram/oh4slldJ7hmiGI2ub5rp53YaWy35i6dInI3g5vJw0jyIqUF...
CVE-2024-38762
Cross-Site Request Forgery CSRF vulnerability in StellarWP Event Tickets event-tickets allows Cross Site Request Forgery.This issue affects Event Tickets: from n/a through = 5.11.0.4...
CVE-2024-37518
Cross-Site Request Forgery CSRF vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site Request Forgery.This issue affects The Events Calendar: from n/a through = 6.5.1.4...
CVE-2024-37518
CVE-2024-37518 is a CSRF vulnerability in The Events Calendar plugin for WordPress, affecting The Events Calendar versions up to 6.5.1.4. The issue is mitigated by upgrading to version 6.5.1.4 or later (the patched release). The connected sources confirm the vulnerability class as Cross-Site Requ...
CVE-2024-37518 WordPress The Events Calendar plugin <= 6.5.1.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site Request Forgery.This issue affects The Events Calendar: from n/a through = 6.5.1.4...
CVE-2024-37518 WordPress The Events Calendar plugin <= 6.5.1.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in The Events Calendar The Events Calendar allows Cross Site Request Forgery.This issue affects The Events Calendar: from n/a through 6.5.1.4...
CVE-2024-13062
creationtimestamp| type| source ---|---|--- 2025-01-02 09:19:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113758017148068621 2025-01-02 09:23:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113758032036152453 2025-01-02 10:42:32+00:00| seen|...
PT-2025-2524 · Unknown · The Events Calendar Event Tickets
Name of the Vulnerable Software and Affected Versions: The Events Calendar Event Tickets versions prior to 5.11.0.4 Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue may be exploited to perform actions without the user...
WordPress plugin The Events Calendar 跨站请求伪造漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...
PT-2025-34385
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The PowerNV hotplug code did not handle surprise plug events correctly, leading to a complete failure of the hotplug system after device removal and requiring a reboot to detect new...
PT-2026-2886
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-ftest-11964-ge022764176fc-dirty 323 Description The Linux kernel contained an issue where unsupported perf events could be registered with synthetic events. This resulted in a warning message and a potenti...
CVE-2024-56677
creationtimestamp| type| source ---|---|--- 2024-12-28 09:49:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113729823529369595 2024-12-28 09:53:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113729837353563403 2024-12-28 10:15:27+00:00| seen|...
AZL-54733 CVE-2024-56675 affecting package kernel for versions less than 6.6.76.1-1
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpfprog/attachment RCU flavors Uprobes always use bpfprogrunarrayuprobe under tasks-trace-RCU protection. But it is possible to attach a non-sleepable BPF program to a uprobe, and non-sleepable BPF...
CVE-2024-56665
In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fix invalid progarray access in perfeventdetachbpfprog Syzbot reported 1 crash that happens for following tracing scenario: - create tracepoint perf event with attr.inherit=1, attach it to the process and set bpf progra...
CVE-2024-56552
In the Linux kernel, the following vulnerability has been resolved: drm/xe/gucsubmit: fix race around suspendpending Currently in some testcases we can trigger: xe 0000:03:00.0: drm Assertion execqueuedestroyedq failed! .... WARNING: CPU: 18 PID: 2640 at drivers/gpu/drm/xe/xegucsubmit.c:1826...
CVE-2024-53224 RDMA/mlx5: Move events notifier registration to be after device registration
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Move events notifier registration to be after device registration Move pkey change work initialization and cleanup from device resources stage to notifier stage, since this is the stage which handles this work events...
CVE-2024-55950 Tabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabby
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that are unnecessary for its core functionality and plugin system, creating potential security vulnerabilities. The application currently holds...
CVE-2024-55950
Tabby (formerly Terminus) prior to version 1.0.216 is affected by a vulnerability caused by overly permissive entitlements that enable dangerous capabilities (camera, microphone, and access to personal folders) through Apple Events, plus entitlements that can permit code injection. The root cause...
CVE-2024-23945
creationtimestamp| type| source ---|---|--- 2024-12-23 15:30:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113702851117565346 2024-12-23 18:20:07+00:00| seen| https://t.me/cvedetector/13542 2024-12-25 05:04:08+00:00| seen|...
CVE-2024-56311
CVE-2024-56311 affects REDCap’s calendar notes feature where CSRF protection is missing on logout. Affected versions range from REDCap 14.9.6 (and up to 15.0.0 per PTSecurity) with notes-based logout potentially terminating sessions when a user accesses a calendar note. Root cause: lack of CSRF p...