24579 matches found
CVE-2023-39456
creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18184...
CVE-2023-41752
creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18183...
CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-49467
CVE-2025-49467 describes a SQL injection in the JEvents Joomla extension. Affected: JEvents component for Joomla versions prior to 3.6.88 and prior to 3.6.82.1. Root cause: vulnerability in publicly accessible actions that list events by date ranges, allowing injection through the date-range quer...
PT-2025-29044
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The perf fuzzer identified a hard-lockup crash on a RaptorLake machine due to an issue in the icl update topdown event function. This crash occurs because the function is incorrectly...
CVE-2025-46988
creationtimestamp| type| source ---|---|--- 2025-06-11 19:33:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18131...
CVE-2025-47057
creationtimestamp| type| source ---|---|--- 2025-06-11 17:34:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18089...
CVE-2025-48125
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Event Manager WP Event Manager wp-event-manager allows PHP Local File Inclusion.This issue affects WP Event Manager: from n/a through = 3.1.51...
GHSA-J3XV-6967-CV88
creationtimestamp| type| source ---|---|--- 2025-06-11 14:31:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18075 2025-06-11 20:16:04+00:00| published-proof-of-concept| Telegram/ph88y4G5oeScgD258CchMKrpr3BuS4k3KcSxkFOuLvPbbMI...
RUSTSEC-2025-0041 matrix-sdk-crypto vulnerable to encrypted event sender spoofing by homeserver administrator
matrix-sdk-crypto versions 0.8.0 up to and including 0.11.0 does not correctly validate the sender of an encrypted event. Accordingly, a malicious homeserver operator can modify events served to clients, making those events appear to the recipient as if they were sent by another user. Although th...
CVE-2025-45055
Silverpeas 6.4.2 contains a stored cross-site scripting XSS vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attacker...
The vulnerability of the microprogramming software of the Elspec G5 digital event recorder, related to the use of default administrative account information, allows a intruder to gain unauthorized access to the device.
The vulnerability of the microprogramming software of the Elspec G5 digital event recorder is related to the use of default administrative account information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the device...
CVE-2025-46985
creationtimestamp| type| source ---|---|--- 2025-06-10 22:32:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18012...
MAL-2025-191933 Malicious code in win32evtlog (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4aba891520e5d5ae607dd5069c1f70512a339cbfeca374b680328cf1e406d3ad Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...
GHSA-X958-RVG6-956W matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator
Summary matrix-sdk-crypto since version 0.8.0 up to 0.11.0 does not correctly validate the sender of an encrypted event. Accordingly, a malicious homeserver operator can modify events served to clients, making those events appear to the recipient as if they were sent by another user. Although the...
GHSA-9WJ4-8H85-PGRW
creationtimestamp| type| source ---|---|--- 2025-06-10 16:35:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114660037799326357...
CVE-2025-43558
creationtimestamp| type| source ---|---|--- 2025-06-10 16:31:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17919...
CVE-2025-48937
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. matrix-sdk-crypto since version 0.8.0 and up to 0.11.0 does not correctly validate the sender of an encrypted event. Accordingly, a malicious homeserver operator can modify events served to clients, making those event...