24552 matches found
GHSA-3Q26-F695-PP76
creationtimestamp| type| source ---|---|--- 2025-07-01 18:08:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20067 2025-07-01 19:07:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779544615525397...
GHSA-H34R-JXQM-QGPR
creationtimestamp| type| source ---|---|--- 2025-07-01 11:09:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20016...
Security Bulletin: IBM Event Endpoint Management is vulnerable to a Cross-site scripting (XSS) attack (CVE-2024-11831).
Summary IBM Event Endpoint Management is vulnerable to a Cross-site scripting XSS attack due to a flaw in npm-serialize-javascript. It is used for safely serialize complex JavaScript objects for storage or transmission. Vulnerability Details CVEID:CVE-2024-11831 DESCRIPTION: A flaw was found in...
MAL-2025-5336 Malicious code in themeone-event (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344156a1acdac4db165b08dad861bc3aa76c408f6e85556cce6b9cf2b0834ecb Any computer that has this package installed or running should be considered...
Malicious code in themeone-event (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344156a1acdac4db165b08dad861bc3aa76c408f6e85556cce6b9cf2b0834ecb Any computer that has this package installed or running should be considered...
GHSA-39HJ-FXVW-758M
creationtimestamp| type| source ---|---|--- 2025-07-01 02:07:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19996 2025-07-01 03:55:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114775957721289224...
kernel: Bluetooth: Fix use after free in hci_send_acl
A vulnerability was found in the Linux kernel's Bluetooth subsystem in the hcidisconnphylinkcompleteevt function. Improper cleanup and reference handling can lead to a connection object, hcon, being freed and then later accessed during a subsequent function call. This issue can lead to a...
This Week in Spring - July 1st, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! It's July!! This week, I'm on PTO, and as always, I'm looking for good reading material on the plane ride over for my holiday. Thank goodness for the ever-vibrant and awesome Spring community; there's tons of stuff to dive...
Malicious code in cvent-event-calendar (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf244badb700ac9a553a78bc1d00ae8c96e4b9b465c79c5bf09374eb9ef768d3 Any computer that has this package installed or running should be considered...
MAL-2025-5387 Malicious code in cvent-event-calendar (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf244badb700ac9a553a78bc1d00ae8c96e4b9b465c79c5bf09374eb9ef768d3 Any computer that has this package installed or running should be considered...
CVE-2025-49520 Event-driven-ansible: authenticated argument injection in git url in eda project creation
A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to the git ls-remote command. This vulnerability allows an authenticated attacker to inject arguments and execute arbitrary commands on the EDA worker. In Kubernetes/OpenShift...
CVE-2025-53074
creationtimestamp| type| source ---|---|--- 2025-06-30 02:55:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19894 2025-06-30 07:16:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lssnc4imfw2a...
CVE-2025-6870
creationtimestamp| type| source ---|---|--- 2025-06-30 00:54:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrxvoxrop23...
CVE-2025-6875
creationtimestamp| type| source ---|---|--- 2025-06-29 22:56:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19881 2025-06-30 00:29:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrwk7ke4j2p...
CVE-2025-6822
creationtimestamp| type| source ---|---|--- 2025-06-28 18:54:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19826 2025-06-28 22:35:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsp7omuxwy2a...
CVE-2023-28904
creationtimestamp| type| source ---|---|--- 2025-06-28 15:55:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19813 2025-06-28 18:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsorjqkqoa2m...
CVE-2025-5540
The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emdmbmeta' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...
CVE-2025-53272
creationtimestamp| type| source ---|---|--- 2025-06-27 14:51:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19739...