CVE-2025-43821

creationtimestamp| type| source ---|---|--- 2025-10-08 13:09:59+00:00| seen| Telegram/6b8tKhi5yFaZJA96duZSXvA4ANVNqtgr3mKoBFtZhmYKdDs...

CVE-2025-60834

creationtimestamp| type| source ---|---|--- 2025-10-08 08:33:00+00:00| seen| https://gist.github.com/ChangeYourWay/5f2b0100b167edf868dd702c0fa3cc35...

CVE-2025-10587

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-10587 Community Events <= 1.5.1 - Unauthenticated SQL Injection

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-10587 Community Events <= 1.5.1 - Unauthenticated SQL Injection

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-61998

creationtimestamp| type| source ---|---|--- 2025-10-08 00:08:31+00:00| seen| Telegram/0LNqKA40w9iCgVpZCLbpxI5rZJAVNtDZO1qSMhBophRSf5s...

Linux Distros Unpatched Vulnerability : CVE-2025-39953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cgroup: split cgroupdestroywq into 3 workqueues A hung task can occur during 1 LTP cgroup testing when repeatedly mounting/unmounting perfevent and netprio...

PT-2025-41220

Name of the Vulnerable Software and Affected Versions Community Events plugin for WordPress versions up to and including 1.5.1 Description The Community Events plugin for WordPress is susceptible to SQL Injection through the event category parameter. Insufficient input sanitization and inadequate...

CVE-2025-43889

creationtimestamp| type| source ---|---|--- 2025-10-07 19:09:27+00:00| seen| Telegram/qS4M-EYh7udzt7ew4eZ4dKEneo1LuCIfSwBIuSkyARLTY...

CVE-2025-45375

creationtimestamp| type| source ---|---|--- 2025-10-07 19:09:23+00:00| seen| Telegram/OUI9iRmZeYkaODbh8mvOd7ziJDfVSk6SybXR4dW-2zHfCM0...

CVE-2025-56243

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

CVE-2025-56243

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

CVE-2022-50553

In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...

CVE-2023-53673

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: call disconnect callback before deleting conn In hcicsdisconnect, we do hciconndel even if disconnection failed. ISO, L2CAP and SCO connections refer to the hciconn without hciconnget, so disconncfm must be...

CVE-2023-53673 Bluetooth: hci_event: call disconnect callback before deleting conn

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: call disconnect callback before deleting conn In hcicsdisconnect, we do hciconndel even if disconnection failed. ISO, L2CAP and SCO connections refer to the hciconn without hciconnget, so disconncfm must be...

CVE-2023-53649

In the Linux kernel, the following vulnerability has been resolved: perf trace: Really free the evsel-priv area In 3cb4d5e00e037c70 "perf trace: Free syscall tp fields in evsel-priv" it only was freeing if strcmpevsel-tpformat-system, "syscalls" returned zero, while the corresponding initializati...

CVE-2025-54400

creationtimestamp| type| source ---|---|--- 2025-10-07 14:00:10+00:00| seen| https://infosec.place/objects/f8eebe2d-2e88-49fd-85ef-4fcd8e05bc5d 2025-10-07 14:15:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115333300163218722...

CVE-2025-11355

creationtimestamp| type| source ---|---|--- 2025-10-07 13:48:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115333195472561898 2026-01-08 17:13:19+00:00| published-proof-of-concept| Telegram/4pwzrJnceRLyEgpbd6VO8VdJVifSdOcVQ4b7TmcAbl02Blg...

CVE-2025-7400

creationtimestamp| type| source ---|---|--- 2025-10-07 08:09:53+00:00| seen| Telegram/ajBaXDOMQa2Tu8LawjpqmpmgVaUcLXteyRoVHIvLTHZwlE...

SUSE CVE-2023-53561

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipcimemwwanchannelinit fai...