CVE-2024-51867

CVE-2024-51867 is a stored XSS vulnerability in the WordPress plugin “Simpul Events by Esotech” (versions up to 1.8.5). Root cause: improper neutralization of input during web page generation. Impact per sources: stored payloads could be injected into pages; CVSS v3.1 base 6.5 (Network attack, us...

CVE-2024-51867 WordPress Simpul Events by Esotech plugin <= 1.8.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in geilt Simpul Events by Esotech simpul-events-by-esotech allows Stored XSS.This issue affects Simpul Events by Esotech: from n/a through = 1.8.5...

WordPress plugin Events Manager Pro – extended 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress plugin Simpul Events by Esotech 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in th...

PT-2024-34997 · Esotech · Simpul Events

Name of the Vulnerable Software and Affected Versions: Simpul Events by Esotech versions 1.8.5 and earlier Description: The issue affects Simpul Events by Esotech, allowing Stored XSS due to improper neutralization of input during web page generation. This is a high-severity XSS vulnerability...

WordPress Explara Events plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Explara Events versions = 0.1.3...

WordPress Explara Events Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Explara Events Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52466 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cb44f6bfc562 Credits Mika Required privilege...

The vulnerability of the perf_pending_task() function in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the perfpendingtask function in the kernel/events/core.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

CVE-2022-23961

creationtimestamp| type| source ---|---|--- 2024-11-18 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-18 2025-01-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-28 2025-01-29 00:00:00+00:00| exploited| The Shadowserver...

CVE-2024-50830

A SQL Injection vulnerability was found in /admin/calendarofevents.php in kashipara E-learning Management System Project 1.0 via the datestart, dateend, and title parameters...

CVE-2024-50841

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/calendarofevents.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the datestart, dateend, and title parameters...

CVE-2024-50830

A SQL Injection vulnerability was found in /admin/calendarofevents.php in kashipara E-learning Management System Project 1.0 via the datestart, dateend, and title parameters...

PT-2024-34440 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was found in the /admin/calendar of events.php endpoint, allowing remote attackers to execute arbitrary scripts via the date start...

CVE-2024-43451

creationtimestamp| type| source ---|---|--- 2024-11-12 17:59:10+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113471281510766374 2024-11-12 18:10:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113471327511681256 2024-11-12 18:26:35+00:00| seen|...

CVE-2024-51750 Element allows a malicious homeserver can modify events leading to unrenderable events or rooms

Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over federation which can prevent Element Web and Desktop from rendering single messages or the entire room containing them. This was patched in Element Web and Desktop 1.11.85...

kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: prevent potential failure in handletxevent for Transfer events without TRB Some transfer events don't always point to a TRB, and consequently don't have a endpoint ring. In these cases, function handletxevent should no...

kernel: nfs: pass explicit offset/count to trace events

nfs in linux kernel permits using nfsfoliolength without locking the folio and without checking for null mapping. This can permit truncation and lead to kernel crash...

kernel: drm/vmwgfx: Fix invalid reads in fence signaled events

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drmevent to the size of the structure that's actually used. The length of the drmevent was set to the parent structure instead of to the...

Siemens SINEC INS 资源管理错误漏洞

Siemens SINEC INS is a software from Siemens, Germany, that provides centralized services for network infrastructures. An uncontrolled resource consumption vulnerability exists in Siemens SINEC INS, which can be exploited by an attacker to trigger a large number of logged events to exhaust system...

WordPress The Events Calendar plugin <= 6.7.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin The Events Calendar versions = 6.7.0...