CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - Vulnerabilidad de Cross-Site Scripting almacenado en el sistema de reserva y reserva de eventos en línea versión 2.3.0. Descripción técnica: Existe una vulnerabilidad XSS almacenado en el software de gestión de eventos versión 2.3.0. Un atacante puede aprovechar es...

WordPress MDJM Event Management plugin < 1.7.8.5 - Unauthenticated Arbitrary Post Deletion vulnerability

Unauthenticated Arbitrary Post Deletion vulnerability discovered by Enrico Marcolini Dottor Marc, Claudio Marchesini Dottor Marc in WordPress Plugin Mobile DJ Manager versions 1.7.8.5...

WordPress RSVP and Event Management <2.7.8 - Missing Authorization

WordPress RSVP and Event Management plugin before 2.7.8 is susceptible to missing authorization. The plugin does not have any authorization checks when exporting its entries, and the export function is hooked to the init action. An attacker can potentially retrieve sensitive information such as...

Nethive-Project

Nethive-Project 零到低延迟监控系统 功能 • 安装 • 快速开始 • 贡献者 • 用户指南 Nethive项目 提供了一个由CVSS 自动测量驱动的安全信息和事件管理（SIEM）基础设施。 功能 基于机器学习的SQL注入检测 基于Chrome XSS审计器的服务端XSS检测 由Auditbeat支持的后渗透检测 Bash命令历史追踪器 对检测到的攻击进行CVSS评估 由Elasticsearch和Logstash支持的实时日志存储 基础系统监控 资源丰富的仪表盘UI 通过邮件通知可疑活动 安装 安装前，请确保已安装前提条件。...

CVE-2025-56605

CVE-2025-56605 XSS Vulnerabilidad de Cross-Site Scripting CVE-2025-56605 — XSS Reflejado en Event Management System 1.0 Descripción: Existe una vulnerabilidad de Cross-Site Scripting XSS reflejado en register.php de PuneethReddyHC/event-management 1.0. El parámetro POST mobile no se valida...

CVE-2026-88802

The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing...

CVE-2026-88802 MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion

The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing...

CVE-2026-88802

CVE-2026-88802 affects two WordPress plugins: MDJM Event Management (before 1.7.8.5) and Mobile Events Manager (through 1.4.8.3). The root cause is the absence of a capability check, nonce validation, or record-type verification in the plugins' playlist entry removal endpoint. An unauthenticated ...

Royal-Event-Management-System-todate-SQL-Injection-Authenticated

Sistema de Gestión de Eventos Royal - Inyección SQL en 'todate' Autenticado 1. Descripción: Royal Event Management System 1.0 permite Inyección SQL a través del parámetro 'todate' en /royalevent/btndatesreport.php?= Explotar este problema podría permitir a un atacante comprometer la aplicación,...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - Vulnerabilidad de inyección SQL en el sistema de reservas y reserva de eventos en línea versión 2.3.0. Descripción técnica: Existe una vulnerabilidad de inyección SQL en el software de gestión de eventos versión 2.3.0. Un atacante puede aprovechar el parámetro...

CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Carga arbitraria de archivos autenticada Administrador+ mediante el parámetro 'mdjmemailuploadfile' El plugin de WordPress MDJM Event Management versión 1.7.8.3 y anteriores contiene una vulnerabilidad de carga arbitraria de archivos que permite a administradores...

CVE-2025-65354

CVE-2025-65354 — Vulnerabilidad de inyección SQL Resumen Existe una vulnerabilidad de inyección SQL en la aplicación event-management de PuneethReddyHC versión 1.0 debido a un manejo inadecuado de las entradas. Tipo de vulnerabilidad Inyección SQL Componente afectado Endpoint:...

CVE-2025-56243

CVE-2025-56243 - Reflected XSS in PuneethReddyHC / Event Management System v1.0 Title: Reflected Cross-Site Scripting XSS via eventid parameter in register.php Vendor / Repository: PuneethReddyHC / event-management Affected Version: 1.0 branch/tag master at the time of testing Reporter: Hafiz...

CVE-2024-51482-PoC

CVE-2024-51482-PoC Exploit autenticado de inyección SQL ciega basada en tiempo para ZoneMinder v1.37. = 1.37.64 Resumen Esta es una prueba de concepto PoC para CVE-2024-51482, una vulnerabilidad de inyección SQL ciega basada en tiempo en la funcionalidad de gestión de eventos de ZoneMinder. El...

CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2025-62343

HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability that may allow user sessions to remain active after logout or session deletion. The assigned CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexity and required user inte...

CVE-2025-62342

HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability where user sessions may not be fully terminated after logout or deletion, due to improper session handling. The vulnerability carries a CVSS 3.1 score of 6.4 (Medium) with high impacts to confidentiality and ava...

CVE-2025-62342 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...

CVE-2026-77145

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...

CVE-2026-77144

The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event managemen...