24601 matches found
CVE-2024-6711 Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS
The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks...
CVE-2024-6711 Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS
The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks...
CVE-2024-8701 Event Calendar <= 1.0.4 - Admin+ Stored XSS
The events-calendar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-8700 Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion
The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars...
CVE-2024-8700
CVE-2024-8700 affects the WordPress plugin Event Calendar (versions up to 1.0.4). The issue is lack of authorization checks on delete actions, allowing unauthenticated users to delete calendars. The connected sources confirm the vulnerability exists but do not provide a fixed version or patch det...
CVE-2024-8700 Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion
The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars...
Access Control Bypass
Overview reflex is a Web apps in pure Python. Affected versions of this package are vulnerable to Access Control Bypass through the event handling mechanism. An attacker can impersonate other users or gain unauthorized administrative access by manipulating state fields that are not intended to be...
CVE-2022-38672
creationtimestamp| type| source ---|---|--- 2025-05-15 14:35:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16513...
CVE-2025-24144
creationtimestamp| type| source ---|---|--- 2025-05-15 13:33:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16485...
CVE-2025-4094
creationtimestamp| type| source ---|---|--- 2025-05-15 04:50:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/36841 2025-05-15 13:17:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/36884 2025-05-21 22:41:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17207...
PT-2025-21491 · WordPress · Event Tickets With Ticket Scanner
Name of the Vulnerable Software and Affected Versions: The Event Tickets with Ticket Scanner WordPress plugin versions prior to 2.3.8 Description: The issue concerns the lack of sanitization and escaping of certain parameters, potentially allowing Cross-Site Scripting attacks by users with a role...
WordPress plugin Event Calendar 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
WordPress plugin Event Tickets with Ticket Scanner 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
Security Bulletin: Multiple Vulnerabilities in IBM Event Streams
Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.7.0. Vulnerability Details CVEID:CVE-2024-52798 DESCRIPTION: path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cau...
Security Bulletin: Improper Privilege Management vulnerability in IBM Event Streams
Summary IBM Event Streams is vulnerable to Improper Privilege Management vulnerability in Apache Kafka Clients to escalate from REST API access to filesystem/environment access, which may be undesirable in certain environments like in a SaaS. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION...
CVE-2025-31226
creationtimestamp| type| source ---|---|--- 2025-05-14 14:32:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16315...
Malicious code in node-event-listener (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ace3ab879582927c692b2b5cc3006afb79d6853935e6feb933e544a35260ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3797 Malicious code in node-event-listener (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ace3ab879582927c692b2b5cc3006afb79d6853935e6feb933e544a35260ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...