CVE-2024-22409

creationtimestamp| type| source ---|---|--- 2024-01-17 00:26:47+00:00| seen| https://t.me/ctinow/169055 2024-01-20 15:43:38+00:00| seen| https://t.me/arpsyndicate/2965 2024-01-25 19:16:44+00:00| seen| https://t.me/ctinow/173714 2024-02-06 18:12:10+00:00| seen| https://t.me/ctinow/180185...

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:0115-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0115-1 advisory. The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were...

CVE-2023-2252

creationtimestamp| type| source ---|---|--- 2024-01-16 17:27:06+00:00| seen| https://t.me/ctinow/168905 2024-01-19 11:20:30+00:00| seen| https://t.me/arpsyndicate/2922 2024-01-23 23:16:20+00:00| seen| https://t.me/ctinow/172379 2024-02-06 11:11:19+00:00| seen| https://t.me/ctinow/179899...

CVE-2023-0824

creationtimestamp| type| source ---|---|--- 2024-01-16 17:27:00+00:00| seen| https://t.me/ctinow/168903 2024-01-22 23:16:37+00:00| seen| https://t.me/ctinow/171515...

CVE-2024-0236

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set for example for Zoom...

CVE-2024-0237

The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated users to update virtual events settings, such as meeting URL, moderator, access details etc...

CVE-2024-0236

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set for example for Zoom...

CVE-2024-0237

The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated users to update virtual events settings, such as meeting URL, moderator, access details etc...

Code injection

The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated users to update virtual events settings, such as meeting URL, moderator, access details etc...

Default credentials

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set for example for Zoom...

CVE-2024-0236 EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set for example for Zoom...

CVE-2024-0237 EventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update

The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated users to update virtual events settings, such as meeting URL, moderator, access details etc...

CVE-2024-0567

creationtimestamp| type| source ---|---|--- 2024-01-16 13:11:27+00:00| seen| https://t.me/ctinow/168790 2024-01-16 15:26:34+00:00| seen| https://t.me/ctinow/168850 2024-01-24 17:16:53+00:00| seen| https://t.me/ctinow/172924...

SUSE-SU-2024:0120-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the...

SUSE-SU-2024:0118-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks bsc1179610 bsc1215237. - CVE-2022-2586:...

CVE-2024-22428

creationtimestamp| type| source ---|---|--- 2024-01-16 05:26:35+00:00| seen| https://t.me/ctinow/168623 2024-02-03 16:26:53+00:00| seen| https://t.me/ctinow/178596...

CVE-2023-51282

creationtimestamp| type| source ---|---|--- 2024-01-16 03:26:50+00:00| seen| https://t.me/ctinow/168603 2024-01-23 21:16:33+00:00| seen| https://t.me/ctinow/172301...

CVE-2023-49107

creationtimestamp| type| source ---|---|--- 2024-01-16 02:26:41+00:00| seen| https://t.me/ctinow/168593 2024-02-03 16:26:51+00:00| seen| https://t.me/ctinow/178594...

CVE-2019-18922

creationtimestamp| type| source ---|---|--- 2024-01-16 00:17:52+00:00| seen| https://t.me/arpsyndicate/2816 2024-03-05 10:41:49+00:00| seen| https://t.me/ctinow/200091 2024-10-15 16:10:08+00:00| exploited| https://t.me/CyberSecurityTechnologies/585...

PT-2024-15403 · WordPress · Eventon

Name of the Vulnerable Software and Affected Versions: EventON WordPress plugin versions prior to 4.5.9 EventON WordPress plugin versions prior to 2.2.7 Description: The issue concerns a lack of authorization in some AJAX actions within the EventON WordPress plugin, allowing unauthenticated users...