CVE-2025-38502

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can be crafted via tail calls. Given two programs each utilizing a cgroup local storage with a different value size,...

CVE-2025-8947

A vulnerability was found in projectworlds Visitor Management System 1.0. This issue affects some unknown processing of the file /querydata.php. The manipulation of the argument dateF/dateP leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

CVE-2025-8293

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-8293

CVE-2025-8293 affects the WordPress plugin Intl DateTime Calendar. The issue is a Stored Cross-Site Scripting via the date parameter in all versions up to 1.0.1, caused by insufficient input sanitization and output escaping. Exploitation requires Contributor-level (or higher) access with authenti...

CVE-2025-8293 Intl DateTime Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-8293 Intl DateTime Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2021-47650

creationtimestamp| type| source ---|---|--- 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:35+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0...

PT-2025-33535 · WordPress · Intl Datetime Calendar

Name of the Vulnerable Software and Affected Versions: Intl DateTime Calendar plugin for WordPress versions up to and including 1.0.1 Description: The Intl DateTime Calendar plugin for WordPress is susceptible to Stored Cross-Site Scripting via the date parameter due to insufficient input...

CVE-2025-8293: Improper Neutralization of Input During Web Page Generation

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-43490

creationtimestamp| type| source ---|---|--- 2025-08-15 20:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwhqbvmf252t...

GHSA-FX9R-RJ68-7P69

creationtimestamp| type| source ---|---|--- 2025-08-15 20:06:58+00:00| seen| Telegram/xABvtDM683qUlb5TwSwTRL5rEA2jvwvXttz85sGuSGuTJcE...

CVE-2025-20263

creationtimestamp| type| source ---|---|--- 2025-08-15 11:00:11+00:00| seen| https://t.me/truesecator/7332 2025-08-18 13:07:31+00:00| seen| https://social.circl.lu/users/circl/statuses/115049919301554545...

CVE-2025-7641

creationtimestamp| type| source ---|---|--- 2025-08-15 09:06:05+00:00| seen| Telegram/zRXqhZ-jixs240ATf2IPfytNh02FXQVO9ez6X6kk3Th2RHo...

CVE-2025-7688

creationtimestamp| type| source ---|---|--- 2025-08-15 09:06:04+00:00| seen| Telegram/u7D7NpNU7NTldUTQjcgkxVFGcq8oiXUSuhjPBH0vZrzuK6I...

CVE-2025-8451

creationtimestamp| type| source ---|---|--- 2025-08-15 07:05:07+00:00| seen| Telegram/p26ToaU-j6s7XFsyYzgmxp18T63fuKDJbkprFcNqWYtREKw...

CVE-2025-9006

creationtimestamp| type| source ---|---|--- 2025-08-15 06:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwg6jfdtrt2x...

CVE-2025-9010

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010 itsourcecode Online Tour and Travel Management System booking_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010 itsourcecode Online Tour and Travel Management System booking_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...