WordPress plugin WP Event Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin WP Event Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in @gdcorp-commerce/cx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10dd727785804adabaebb122da36be51c97a082214c8d6de8d70a1ad01f3b5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5870 Malicious code in @gdcorp-commerce/cx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10dd727785804adabaebb122da36be51c97a082214c8d6de8d70a1ad01f3b5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-74V4-F3X9-PPVR

creationtimestamp| type| source ---|---|--- 2025-07-15 21:28:51+00:00| seen| Telegram/la-69G5ZUDwSUqsMSPSEPIz2QDSk9VHKXznNo-B6B-DPKMw...

GHSA-93HX-V9PV-QRM4

creationtimestamp| type| source ---|---|--- 2025-07-15 19:56:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114859009211207817...

CVE-2025-53893

creationtimestamp| type| source ---|---|--- 2025-07-15 17:15:45+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-7xqm-7738-642x...

CVE-2025-3621

creationtimestamp| type| source ---|---|--- 2025-07-15 08:24:53+00:00| seen| Telegram/jiq-rOEL9YSlMg8Ja-PW1HxbjYWUh3fx5c2XwTkQ6UNskqg...

This Week in Spring - July 15th, 2025

Hi, Spring fans! It's already the 15th of July! We're closer to 2026 than we are to 2024. And time's sure flying. Like I will, tomorrow. I'll be flying to Denver for the amazing UBERCONF software show! I'll be doing a workshop and two talks, and if you're there, I hope you'll come say "hi"! Let's...

SUSE CVE-2025-53549

The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection vulnerability in the EventCache::findeventwithrelations method of matrix-sdk 0.11 and 0.12 allows malicious room members to execute arbitrary SQL commands in Matrix clients that...

CVE-2025-53885

Directus Flows logs can disclose sensitive user data via the Log to Console operation. Affected: Directus real-time API/dashboard prior to 11.9.0 (versions 9.0.0–11.8.x). Root cause: logging unfettered input during user create/update events, enabling a malicious admin to view other users’ data. I...

CVE-2025-53819

creationtimestamp| type| source ---|---|--- 2025-07-14 21:23:01+00:00| seen| Telegram/bonnwBsmIXP6UfzF4HHhmczBUZ2ZCA6ayWuUIAXuN6JEQ...

CVE-2025-53640

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields such as ACLs could be misused to dump basic user details such ...

CVE-2025-53640

CVE-2025-53640 – Indico user details disclosure via API/endpoint . Indico (event management platform) uses Flask-Multipass for authentication. Until fixed in v3.3.7, a specific endpoint that presents user details in fields such as ACLs could be abused to bulk-dump basic user data (name, affiliati...

CVE-2025-53640 Indico vulnerable to user enumeration via API endpoint

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields such as ACLs could be misused to dump basic user details such ...

CVE-2025-53640 Indico vulnerable to user enumeration via API endpoint

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields such as ACLs could be misused to dump basic user details such ...

Report from the Cambridge Cybercrime Conference

The Cambridge Cybercrime Conference was held on 23 June. Summaries of the presentations are here...

CVE-2025-25180

creationtimestamp| type| source ---|---|--- 2025-07-14 02:26:32+00:00| seen| Telegram/BG1k5rtUtqd96aRwtpny8SJ-IDKjPvwJXEwe5LNhNMsyyp4...

WordPress Events Manager Plugin SQL Injection Vulnerability

WordPress Events Manager plugin is a full-featured event management tool that supports event registration, ticket sales, booking management and recurring event settings. The WordPress Events Manager plugin suffers from a SQL injection vulnerability that stems from the plugin's failure to adequate...

The vulnerability of the Setup and Boot Event Collection function in Microsoft Windows systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Setup and Boot Event Collection function in Microsoft Windows systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...