PT-2025-15309

Name of the Vulnerable Software and Affected Versions: Skia affected versions not specified Description: An out-of-bounds write issue exists in the initializeSwizzler function within SkBmpStandardCodec.cpp due to a heap buffer overflow. This could lead to remote escalation of privilege without...

CVE-2025-32225

Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through = 3.2.0...

CVE-2025-31416

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through = 2.8.4...

PT-2025-20530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a problem in the Linux kernel's perf/core subsystem, where a WARN ON ONCE cleanup check could trigger after the initial check passed but before the child event's...

CVE-2025-31739

Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimalistic Event Manager: from n/a through = 1.1.1...

CVE-2024-47215

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected latency,...

CVE-2024-47217

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2024-47213

An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

CVE-2025-29477

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...

CVE-2025-32278

creationtimestamp| type| source ---|---|--- 2025-04-04 16:36:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10492 2025-04-04 17:07:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpylubc2x 2025-04-04 20:32:10+00:00| seen| https://t.me/cvedetector/22155...

CVE-2025-32225

Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through = 3.2.0...

CVE-2025-32225 WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through = 3.2.0...

CVE-2025-32225 WordPress WP Event Manager plugin <= 3.1.47 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Event Manager WP Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Event Manager: from n/a through 3.1.47...

CVE-2025-3249

creationtimestamp| type| source ---|---|--- 2025-04-04 14:36:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10460 2025-04-04 18:01:19+00:00| seen| https://t.me/cvedetector/22132...

CVE-2025-31416

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through = 2.8.4...

CVE-2025-31416

creationtimestamp| type| source ---|---|--- 2025-04-04 13:35:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10440 2025-04-04 18:01:24+00:00| seen| https://t.me/cvedetector/22137...

WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Event Manager versions = 3.2.0...

CVE-2025-31416 WordPress Awesome Event Booking plugin <= 2.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through 2.8.4...

CVE-2025-31416 WordPress Awesome Event Booking plugin <= 2.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through = 2.8.4...