CVE-2025-2797

creationtimestamp| type| source ---|---|--- 2025-04-04 07:36:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10414 2025-04-04 10:29:18+00:00| seen| https://t.me/cvedetector/22086 2025-04-04 15:37:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10481 2025-04-04...

CVE-2025-2159

creationtimestamp| type| source ---|---|--- 2025-04-04 06:35:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10407 2025-04-04 10:29:32+00:00| seen| https://t.me/cvedetector/22096...

CVE-2025-3208

creationtimestamp| type| source ---|---|--- 2025-04-04 04:35:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10388 2025-04-04 07:58:40+00:00| seen| https://t.me/cvedetector/22074...

SUSE CVE-2025-21948

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...

WordPress plugin WP Event Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-14898 · Unknown · Awesome Event Booking

Name of the Vulnerable Software and Affected Versions: Awesome Event Booking versions through 2.8.4 Description: The issue affects Awesome Event Booking, allowing Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For versions through 2.8.4, update ...

PT-2025-15040

Name of the Vulnerable Software and Affected Versions fluent-bit version 3.7.2 Description The issue allows a local attacker to cause a denial of service via the consume event function. Recommendations For fluent-bit version 3.7.2, as a temporary workaround, consider disabling the consume event...

WordPress plugin Awesome Event Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-14990 · WordPress · Wp Event Manager

Name of the Vulnerable Software and Affected Versions: WP Event Manager versions through 3.1.47 Description: The issue is related to Missing Authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through 3.1.47, update to a...

Fluent Bit 安全漏洞

Fluent Bit is an open source log processing and analyzing system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit version 3.7.2, which stems from a flaw in the consumeevent function that could lead to a denial of service...

CVE-2025-29477

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...

CVE-2025-31462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar cgm-event-calendar allows Reflected XSS.This issue affects CGM Event Calendar: from n/a through = 0.8.5...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

CVE-2024-47213

An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted...

CVE-2024-47215

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected latency,...

CVE-2024-47217

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2024-47212

An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API endpoint of Iglu Server and can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2025-0272

creationtimestamp| type| source ---|---|--- 2025-04-03 19:25:13+00:00| seen| https://t.me/cvedetector/22001 2025-04-04 20:36:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10551...

CVE-2020-22660

creationtimestamp| type| source ---|---|--- 2025-04-03 18:35:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10316...

CVE-2025-3172

creationtimestamp| type| source ---|---|--- 2025-04-03 18:35:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10297 2025-04-03 21:55:38+00:00| seen| https://t.me/cvedetector/22004...