24669 matches found
CVE-2025-1762
CVE-2025-1762 concerns the WordPress plugin Event Tickets with Ticket Scanner prior to version 2.5.4. The root cause is missing CSRF protection when updating settings, enabling a logged-in attacker to cause settings changes via CSRF. Public sources (NVD, Red Hat, CVE lists) confirm the vulnerabil...
CVE-2025-1762 Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF
The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2025-1762 Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF
The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
SUSE CVE-2025-21889
In the Linux kernel, the following vulnerability has been resolved: perf/core: Add RCU read lock protection to perfiteratectx The perfiteratectx function performs RCU list traversal but currently lacks RCU read lock protection. This causes lockdep warnings when running perf probe with unshare1...
WordPress plugin Event Tickets with Ticket Scanner 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2025-26956
creationtimestamp| type| source ---|---|--- 2025-03-27 22:36:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9240 2025-03-28 01:01:18+00:00| seen| https://t.me/cvedetector/21351...
WordPress Event Tickets plugin <= 5.20.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Event Tickets versions = 5.20.0...
CVE-2024-21073
creationtimestamp| type| source ---|---|--- 2025-03-27 21:27:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9226...
CVE-2025-22740
creationtimestamp| type| source ---|---|--- 2025-03-27 21:27:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9211 2025-03-28 01:01:24+00:00| seen| https://t.me/cvedetector/21355...
CVE-2023-0071
creationtimestamp| type| source ---|---|--- 2025-03-27 20:27:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9207...
CVE-2022-4552
creationtimestamp| type| source ---|---|--- 2025-03-27 19:26:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9179...
CVE-2025-30363
creationtimestamp| type| source ---|---|--- 2025-03-27 19:09:46+00:00| seen| https://t.me/cvedetector/21317...
CVE-2023-53007
In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure traceprintk can output as soon as it can be used Currently traceprintk can be used as soon as earlytraceinit is called from startkernel. But if a crash happens, and "ftracedumponoops" is set on the kernel comma...
CVE-2022-49744
In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix pte marker when fork without fork event Patch series "mm: Fixes on pte markers". Patch 1 resolves the syzkiller report from Pengfei. Patch 2 further harden pte markers when used with the recent swapin error markers...
CVE-2022-49744
The CVE-2022-49744 entry concerns a Linux kernel mm/uffd issue: when forking, the dst_vma may not inherit VM_UFFD_WP even if the src has it, leading to a stale pte marker and potential access to a corrupted page. The fix is a two‑patch series under “mm: Fixes on pte markers” that hardens pte mark...
GHSA-963H-3V39-3PQF
creationtimestamp| type| source ---|---|--- 2025-03-27 15:26:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9118...
CVE-2024-23250
creationtimestamp| type| source ---|---|--- 2025-03-27 15:26:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9110...
CVE-2025-22669
Cross-Site Request Forgery CSRF vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Cross Site Request Forgery.This issue affects Awesome Event Booking: from n/a through = 2.7.5...
CVE-2025-22668
Missing Authorization vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Event Booking: from n/a through = 2.7.2...
DEBIAN-CVE-2025-21889
In the Linux kernel, the following vulnerability has been resolved: perf/core: Add RCU read lock protection to perfiteratectx The perfiteratectx function performs RCU list traversal but currently lacks RCU read lock protection. This causes lockdep warnings when running perf probe with unshare1...