CVE-2025-56605

CVE-2025-56605 XSS Cross-Site Scripting Schwachstelle CVE-2025-56605 — Reflektiertes XSS im Event Management System 1.0 Beschreibung: Eine reflektierte Cross-Site Scripting XSS Schwachstelle existiert in register.php von PuneethReddyHC/event-management 1.0. Der mobile POST-Parameter wird nicht...

CVE-2025-65354

CVE-2025-65354 — Vulnerabilità di SQL Injection Riepilogo Esiste una vulnerabilità di SQL Injection nell'applicazione event-management PuneethReddyHC versione 1.0 a causa di una gestione impropria degli input. Tipo di vulnerabilità Iniezione SQL Componente interessato Endpoint:...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL-Injection-Schwachstelle im Online-Eventbuchungs- und Reservierungssystem Version 2.3.0. Technische Beschreibung: Eine SQL-Injection-Schwachstelle existiert in der Eventmanagement-Software Version 2.3.0. Ein Angreifer kann den anfälligen Parameter „id“ auf der...

Royal-Event-Management-System-todate-SQL-Injection-Authenticated

Royal Event Management System - Injeção de SQL em 'todate' Autenticado 1. Descrição: O Royal Event Management System 1.0 permite injeção de SQL através do parâmetro 'todate' em /royalevent/btndatesreport.php?= Explorar este problema pode permitir que um atacante comprometa a aplicação, acesse ou...

CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - ऑनलाइन इवेंट बुकिंग और आरक्षण प्रणाली संस्करण 2.3.0 में संग्रहीत क्रॉस-साइट स्क्रिप्टिंग भेद्यता। तकनीकी विवरण: इवेंट प्रबंधन सॉफ्टवेयर संस्करण 2.3.0 में एक संग्रहीत XSS भेद्यता मौजूद है। एक हमलावर इस भेद्यता का उपयोग करके वेब सर्वर के उपयोगकर्ताओं की ओर से...

CVE-2026-77144

The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event managemen...

CVE-2026-77145

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...

CVE-2026-77144

CVE-2026-77144 is a broken access control vulnerability in the TYPO3 extension Events 2 (events2), specifically in its frontend management plugin. The plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own, while th...

EUVD-2026-65331

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...

TYPO3-EXT-SA-2026-023: Broken Access Control in extension "Event management and registration" (sf_event_mgt)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...

TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...

WordPress RSVP and Event Management <2.7.8 - Missing Authorization

WordPress RSVP and Event Management plugin before 2.7.8 is susceptible to missing authorization. The plugin does not have any authorization checks when exporting its entries, and the export function is hooked to the init action. An attacker can potentially retrieve sensitive information such as...

Nethive-Project

Nethive-Project Sistema di monitoraggio a latenza da zero a bassa Funzionalità • Installazione • Avvio rapido • Contributori • Guida utente Il Progetto Nethive fornisce un'infrastruttura di Security Information and Event Management SIEM potenziata da misurazioni automatiche...

CVE-2024-51482-PoC

CVE-2024-51482-PoC Эксплойт аутентифицированной time-based blind SQL-инъекции для ZoneMinder v1.37. = 1.37.64 Обзор Это proof-of-concept эксплойт для CVE-2024-51482, уязвимости time-based blind SQL-инъекции в функциональности управления событиями ZoneMinder. Эксплойт требует аутентификации и...

CVE-2025-62306

HCL IntelliOps Event Management IEM is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response...

CVE-2026-21784

HCL IntelliOps Event Management (IEM) ships with missing or insecure Cross-Origin Resource Sharing (CORS) headers, allowing unauthorized external origins to read application resources. CVSS 3.1 rates this MEDIUM (4.8), requiring high privileges and user interaction. No patch version, exploit, or ...

CVE-2025-62299

HCL IntelliOps Event Management (IEM) has a least-privilege violation allowing a privileged (PR:H) network attacker to access resources beyond their original privileges, with HIGH confidentiality impact. CVSS 6.6 MEDIUM; no exploitation details or fix version provided in the documents.

CVE-2025-62307

HCL IntelliOps Event Management (IEM) suffers from insufficient logging, weakening accountability, obscuring attack detection, and enabling privilege probing. CVSS 3.1 scores it MEDIUM (5.4) with network attack vector, low privileges required, and low confidentiality/integrity impact. No exploita...

EUVD-2025-210750

HCL IntelliOps Event Management IEM is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing...

CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Caricamento Arbitrario di File Autenticato Amministratore+ tramite il Parametro 'mdjmemailuploadfile' Il plugin WordPress MDJM Event Management versione 1.7.8.3 e precedenti contiene una vulnerabilità di caricamento arbitrario di file che consente agli...