CVE-2024-9415

creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836215184484...

Denial of Service (DoS)

Overview aim is a super-easy way to record, search and compare AI experiments. Affected versions of this package are vulnerable to Denial of Service DoS due to the ScheduledStatusReporter object being instantiated to run on the main thread of the tracking server. An attacker can block the main...

CVE-2024-7034

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-9612 Unauthorized Access in danswer-ai/danswer

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end doe...

CVE-2025-1766 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'paymentcomplete' function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated...

Aim 资源管理错误漏洞

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. Aim version 3.23.0 suffers from a Resource Management Error vulnerability that stems from a ScheduledStatusReporter object that could cause the main thread to block, which could result in a denial ...

PT-2025-12026

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.23.0 Description The ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the...

PT-2025-12004 · WordPress · Eventin

Name of the Vulnerable Software and Affected Versions: Eventin plugin for WordPress versions up to, and including, 4.0.24 Description: The issue allows unauthorized modification of data due to a missing capability check on the payment complete function. This makes it possible for unauthenticated...

CVE-2025-27780

creationtimestamp| type| source ---|---|--- 2025-03-19 22:01:14+00:00| published-proof-of-concept| Telegram/jlMT5pQePgK5GBSq5wMoupEVU9UT7ofYY1WgfO6aSFHSaLY 2025-03-19 23:00:34+00:00| seen| https://t.me/cvedetector/20681 2025-03-20 00:49:02+00:00| seen|...

WordPress Eventin plugin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update vulnerability

Missing Authorization to Unauthenticated Payment Status Update vulnerability discovered by wesley wcraft in WordPress Plugin Eventin versions = 4.0.24...

CVE-2025-30197

creationtimestamp| type| source ---|---|--- 2025-03-19 18:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnc2kyp2n 2025-03-19 18:49:14+00:00| seen| https://t.me/cvedetector/20640 2025-03-21 14:19:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8334 2025-08-12...

Unexpected Status Code or Return Value

Overview Affected versions of this package are vulnerable to Unexpected Status Code or Return Value in initConn, which causes out of order responses when CLIENT SETINFO times out while establishing a connection. Workaround This vulnerability can be avoided by setting DisableIndentity to true when...

CVE-2025-29930

creationtimestamp| type| source ---|---|--- 2025-03-18 21:55:34+00:00| seen| https://t.me/cvedetector/20601 2025-08-12 13:33:27+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21 03:19:26+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996...

CVE-2025-26138

creationtimestamp| type| source ---|---|--- 2025-03-18 20:15:01+00:00| seen| https://t.me/cvedetector/20590 2025-03-18 20:18:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihyrudw2j...

CVE-2025-21619

creationtimestamp| type| source ---|---|--- 2025-03-18 19:42:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114185140719428080 2025-03-18 20:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzndug2k 2025-03-18 21:55:43+00:00| seen| https://t.me/cvedetector/206...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the indexonUpdateStatus function in Orders.php, which does not check for the permissions of the user before modifying an order. Remediation Upgrade tastyigniter/tastyigniter to version 4.0.0-beta.1 or higher...

CVE-2025-2494

creationtimestamp| type| source ---|---|--- 2025-03-18 11:55:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7901 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 16:03:50+00:00| seen| https://t.me/cvedetector/20565 2025-03-18 16:13:23+00:0...

CVE-2025-25220

creationtimestamp| type| source ---|---|--- 2025-03-18 08:57:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7896 2025-03-18 09:48:26+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114182802995800818 2025-03-18 11:53:22+00:00| seen| https://t.me/cvedetector/20557 2025-03-...

CVE-2024-540385

creationtimestamp| type| source ---|---|--- 2025-03-18 07:57:48+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lkn73e2qys2y 2025-03-19 03:27:06+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lkpagarcoc2e...

CVE-2025-29910

creationtimestamp| type| source ---|---|--- 2025-03-18 00:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114180582366575557 2025-08-12 13:33:28+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21 03:19:30+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996...