CVE-2006-5738

creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10247...

CVE-2006-5649

creationtimestamp| type| source ---|---|--- 2025-04-03 15:34:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10239...

CVE-2025-31739

Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimalistic Event Manager: from n/a through = 1.1.1...

CVE-2025-31739 WordPress Minimalistic Event Manager plugin <= 1.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimalistic Event Manager: from n/a through = 1.1.1...

CVE-2025-31739

Technical details for CVE-2025-31739 are not provided in the supplied documents. No product/version/impact/remediation details are available here. Monitor for updates from official advisories on Minimalistic Event Manager.

CVE-2023-47639

creationtimestamp| type| source ---|---|--- 2025-04-03 13:02:57+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-rfw5-cqjj-7v9r 2025-04-03 21:55:52+00:00| seen| https://t.me/cvedetector/22014...

CLSA-2025-1743675732 avahi: Fix of 8 CVEs

CVE-2021-3468: handle termination event on avahi Unix socket to prevent infinite loop - CVE-2023-1981: prevent avahi daemon crash by emitting an error if the requested D-Bus service is not found - CVE-2021-3502: fix avahi-daemon crashing from NULL pointer assertions - CVE-2023-38469: reject...

CVE-2025-30794

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP Event Tickets event-tickets allows Reflected XSS.This issue affects Event Tickets: from n/a through = 5.20.0...

CVE-2025-31074

Deserialization of Untrusted Data vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Object Injection.This issue affects Mobile DJ Manager: from n/a through = 1.7.5.2...

CVE-2024-13673

creationtimestamp| type| source ---|---|--- 2025-04-03 07:34:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10175 2025-04-03 11:03:29+00:00| seen| https://t.me/cvedetector/21968...

DoS (Denial of Service) io.netty:netty-handler Dependency in Confluence Data Center and Server

This High severity io.netty:netty-handler Dependency vulnerability was introduced in versions 7.19 of Confluence Data Center and Server. This io.netty:netty-handler Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

PVS Server: Windows Event logging for UEFI target Devices Boot Time inaccurate

The customer had built a new UEFI based vdisk and deployed it to production. The customer subsequently observed that the PVS Servers were recording a clearly inaccurate boot time, of millions of minutes, in Windows Event logs when target devices were booting. Example inaccurate boot time logged i...

PT-2025-14805 · Unknown · Snowbridge

Name of the Vulnerable Software and Affected Versions: Snowbridge affected versions not specified Description: The issue involves attaching an invalid GTM SS preview header to events in Snowbridge setups that send data to Google Tag Manager Server Side. This causes the events to be retried...

CVE-2024-47213

An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted...

CVE-2024-47215

CVE-2024-47215 affects Snowbridge setups that forward data to Google Tag Manager Server Side. The issue is an invalid GTM SS preview header attached to events, causing event retries indefinitely and potentially degrading forwarding performance (latency, throughput). Public details across connecte...

CVE-2024-47212

Affected software: Iglu Server 0.13.0 and earlier. Issue: sending very large payloads to a specific API endpoint can render the server completely unresponsive, risking a halt of event processing in the pipeline if recovery is not performed. Root cause (as described): result of oversized requests;...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

CVE-2024-47217

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

WordPress plugin Minimalistic Event Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-47213

CVE-2024-47213 affects Enrich 5.1.0 and earlier. A malformed Snowplow event sent to the pipeline triggers validation to fail, causing Enrich to crash and restart in a loop, leading to halted event processing. Connected sources corroborate the same description; no concrete exploit details or remed...