CVE-2025-32445 Users can gain privileged access to the host system and cluster with EventSource and Sensor CR

Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative privileges. The EventSource and Sensor...

CVE-2015-10002

creationtimestamp| type| source ---|---|--- 2025-04-15 14:55:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11825...

CVE-2025-32944

creationtimestamp| type| source ---|---|--- 2025-04-15 14:15:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114342397806384726 2025-04-15 16:38:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmujatjtho2z 2025-04-15 17:26:34+00:00| seen| https://t.me/cvedetector/229...

CVE-2025-26744

creationtimestamp| type| source ---|---|--- 2025-04-15 12:54:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11801 2025-04-15 15:46:27+00:00| seen| https://t.me/cvedetector/22951...

CVE-2025-3574

creationtimestamp| type| source ---|---|--- 2025-04-15 08:55:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11775 2025-04-15 12:01:16+00:00| seen| Telegram/p3dOqAKCX1N8voarp4buM6tUI75kV6N-doMergTPyUUjU 2025-04-15 13:15:44+00:00| seen| https://t.me/cvedetector/22929...

CVE-2024-13207

creationtimestamp| type| source ---|---|--- 2025-04-15 06:54:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11773 2025-04-15 08:38:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmtofrv2ux2a 2025-04-15 09:04:49+00:00| seen| https://t.me/cvedetector/22925...

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent, related to unlimited resource distribution, allows a perpetrator to trigger a service failure.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Citrix Cloud Intermittent loss of connectivity to On-Prem AD

When attempting to run MCS Process - Ran into issues contacting the On-Prem Active Directory Citrix.CloudServices.ADAgent EventID 10102 Errors: Message=Unable to connect to the forest associated with domain "DOMAINNAME.local"...

GHSA-VRQ4-9HC3-CGP7

creationtimestamp| type| source ---|---|--- 2025-04-14 23:53:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11731 2025-04-15 00:39:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114339189023793965...

CVE-2025-3569

creationtimestamp| type| source ---|---|--- 2025-04-14 18:51:40+00:00| seen| https://t.me/cvedetector/22879...

Privilege Chaining

Overview Affected versions of this package are vulnerable to Privilege Chaining through the spec.template.container configuration in the EventSource and Sensor custom resources. An attacker can gain privileged access to the host system and cluster by injecting commands into a container template...

Privilege Chaining

Overview Affected versions of this package are vulnerable to Privilege Chaining through the spec.template.container configuration in the EventSource and Sensor custom resources. An attacker can gain privileged access to the host system and cluster by injecting commands into a container template...

WordPress Event Espresso plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Event Espresso – Custom Email Template Shortcode versions = 1.0.0...

CVE-2021-39369

creationtimestamp| type| source ---|---|--- 2025-04-14 16:53:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11653...

Take Command 2025: A Day of Insight, Innovation, and Impact

Take Command 2025 is officially in the books. From the opening sessions to the final takeaways, the summit delivered a full day of high-impact discussions, fresh research, and powerful stories from across the cybersecurity spectrum. This year’s event brought together cybersecurity leaders,...

CVE-2025-22371

creationtimestamp| type| source ---|---|--- 2025-04-14 12:39:42+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lmrlgchjok2u 2025-04-14 12:39:42+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lmrlgasyzc2u 2025-04-14 12:39:43+00:00| seen|...

The vulnerability of the __do_sys_perf_event_open() function in the kernel/events/core.c module of the Linux operating system allows a attacker to compromise the integrity of protected information.

The vulnerability of the dosysperfeventopen function in the kernel/events/core.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...

Citrix Virtual Apps and Desktops - ICA Launch failure, Connection was terminated by the server

When user tries to launch a session it fails with the error displayed in Citrix Workspace App: Connection was terminated by the server. Citrix Director displays User Connection Failures; Reason: Unavailable Licenses You can find the events in the Event Viewer on the Delivery Controller: Event ID:...

The vulnerability of the perf_event_swap_task_ctx_data function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the perfeventswaptaskctxdata function in the Linux operating system’s kernel is related to the exhaustion of resources on the central processor. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2025-32896

creationtimestamp| type| source ---|---|--- 2025-04-12 14:35:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lmmqx6teob2n 2025-04-13 04:16:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lmo6spbxrd2t 2025-04-13 18:25:43+00:00| seen|...