9601 matches found
CVE-2026-33006
creationtimestamp| type| source ---|---|--- 2026-05-04 17:18:53+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/116517446102524326 2026-05-04 17:53:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml2airgugo2h 2026-05-04 21:11:15+00:00| seen|...
Missing Authentication for Critical Function
Overview prefect is a Prefect is a new workflow management system, designed for modern infrastructure and powered by the open-source Prefect Core workflow engine. Users organize Tasks into Flows, and Prefect takes care of the rest. Affected versions of this package are vulnerable to Missing...
GHSA-HVPH-5985-R63V Prefect Unauthenticated Event Injection via /api/events/in WebSocket
A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be...
CVE-2026-7723 PrefectHQ prefect WebSocket Endpoint in missing authentication
A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be...
CVE-2026-42364
creationtimestamp| type| source ---|---|--- 2026-05-04 01:19:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyiwiqxep2n 2026-05-04 01:33:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyjpuojny26 2026-05-04 02:40:28+00:00| seen|...
CVE-2026-7372
creationtimestamp| type| source ---|---|--- 2026-05-04 01:19:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyiwbcqjd2w 2026-05-04 01:20:05+00:00| seen| https://bsky.app/profile/potato.software/post/3mkyixk7tez2l 2026-05-04 01:20:05+00:00| seen|...
WordPress plugin Easy PayPal Events & Tickets å®å Øę¼ę“
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress plugin Easy PayPal Events & Tickets äæ”ä»»ē®”ēé®é¢ę¼ę“
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-36753
Name of the Vulnerable Software and Affected Versions PrefectHQ prefect versions prior to 3.6.14 Description A flaw in the WebSocket Endpoint component allows a remote attacker to perform a manipulation that leads to missing authentication. The issue is located within the '/api/events/in' endpoin...
VulnCheck KEV: CVE-2025-9807
The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the āsā parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...
CVE-2026-31782
The CVE-2026-31782 entry describes a Linux kernel perf/x86 issue where an auto counter reload could group software events with the x86_hybrid_pmu inside intel_pmu_hw_config. A container_of operation in intel_pmu_set_acr_caused_constr (via the hybrid helper) could read memory out of bounds. The fi...
CVE-2026-31782 perf/x86: Fix potential bad container_of in intel_pmu_hw_config
In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad containerof in intelpmuhwconfig Auto counter reload may have a group of events with software events present within it. The software event PMU isn't the x86hybridpmu and a containerof operation in...
CVE-2026-31782 perf/x86: Fix potential bad container_of in intel_pmu_hw_config
In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad containerof in intelpmuhwconfig Auto counter reload may have a group of events with software events present within it. The software event PMU isn't the x86hybridpmu and a containerof operation in...
CVE-2026-31771
CVE-2026-31771 affects the Linux kernel Bluetooth HCI event handling. The vulnerability arose because hci_store_wake_reason() could be invoked before per-event payload length checks, potentially allowing a short HCI event frame to reach bacpy() prior to validation. The fix restructures wake-addre...
EUVD-2026-26544
In the Linux kernel, the following vulnerability has been resolved: thermal: core: Address thermal zone removal races with resume Since thermalzonepmcomplete and thermalzonedeviceresume re-initialize the pollqueue delayed work for the given thermal zone, the canceldelayedworksync in...
WordPress Display Eventbrite Events plugin <= 6.1.10 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Display Eventbrite Events versions = 6.1.10...
WordPress Events Addon for Elementor plugin <= 2.2.2 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Events Addon for Elementor versions = 2.2.2...
PT-2026-36417
In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad container of in intel pmu hw config Auto counter reload may have a group of events with software events present within it. The software event PMU isn't the x86 hybrid pmu and a container of operation i...
CVE-2018-25317
creationtimestamp| type| source ---|---|--- 2026-04-29 20:31:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknwyjsior2t 2026-04-29 21:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknyrpfdyv2n 2026-05-05 04:37:07+00:00| seen|...
CVE-2018-25316
creationtimestamp| type| source ---|---|--- 2026-04-29 20:27:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknwr3n25e2k 2026-04-29 20:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknyiqt73m2e 2026-05-04 20:07:07+00:00| seen|...