24339 matches found
CVE-2026-24683
FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...
CVE-2026-24683 FreeRDP has a heap-use-after-free in ainput_send_input_event
FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...
CVE-2026-24683 FreeRDP has a heap-use-after-free in ainput_send_input_event
FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...
CVE-2026-24343
creationtimestamp| type| source ---|---|--- 2026-02-09 15:24:09+00:00| seen| https://seclists.org/oss-sec/2026/q1/153 2026-02-09 16:45:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3megvi4cpd52b 2026-02-10 16:25:24+00:00| seen|...
Criminal IP Integrates with IBM QRadar to Deliver Real-Time Threat Intelligence Across SIEM and SOAR
Torrance, United States / California, 9th February 2026, CyberNewswire...
GHSA-2WW3-72RP-WPP4
creationtimestamp| type| source ---|---|--- 2026-02-09 08:10:05+00:00| seen| https://gist.github.com/alon710/52261fea2d6335abf9dd90d11344bc38...
WordPress Timeline Event History plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Timeline Event History versions = 3.2...
CVE-2026-2217
A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...
CVE-2026-2217
A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...
CVE-2026-2217 itsourcecode Event Management System manage_user.php sql injection
A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...
CVE-2026-2217
CVE-2026-2217 affects itsourcecode Event Management System 1.0. The vulnerable element is /admin/manage_user.php; manipulating the ID parameter yields SQL injection. Exploitation can be remote and publicly disclosed. CVSS data from sources show high impact under various vectors (NVD CVSS3.1 base ...
CVE-2026-2217
A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...
CVE-2026-2217 itsourcecode Event Management System manage_user.php sql injection
A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...
FreeRDP 资源管理错误漏洞
FreeRDP is an open-source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. Versions of FreeRDP prior to 3.22.0 contained a resource management vulnerability. This vulnerability stemmed from the use of ainputsendinputevent to cache channelcallback in local variables, which...
ROS-20260209-73-0038
A vulnerability in the event caption field of the Moodle virtual learning environment calendar is related to the failure to take measures to protect the structure of the web page. Exploitation of the vulnerability could allow a remote attacker to conduct cross-site scripting XSS attacks...
itsourcecode Event Management System SQL注入漏洞
itsourcecode Event Management System is an open-source event management system developed by itsourcecode. Version 1.0 of the itsourcecode Event Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in the file...
PT-2026-7069
Name of the Vulnerable Software and Affected Versions itsourcecode Event Management System version 1.0 Description A flaw exists in itsourcecode Event Management System version 1.0 that allows for remote code execution. The issue is located in the /admin/manage user.php file, specifically within ...
CVE-2026-23704
creationtimestamp| type| source ---|---|--- 2026-02-08 23:02:28+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mef244gvqc2l...
CVE-2026-2155
creationtimestamp| type| source ---|---|--- 2026-02-08 15:00:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mee75yfryz2m 2026-02-08 15:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116035604839629407...