CVE-2025-1766 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'paymentcomplete' function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated...

CVE-2025-1766 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'paymentcomplete' function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated...

CVE-2025-1766

CVE-2025-1766 affects the WordPress plugin Eventin (Event Manager/Events Calendar/Tickets/Registrations) up to version 4.0.24. Root cause: missing capability check in the payment_complete function allows unauthenticated modification of data, enabling an attacker to set ticket payments to 'complet...

CVE-2025-1770 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.24 via the 'style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

CVE-2025-1770

CVE-2025-1770 : Local File Inclusion in WordPress plugin “Eventin” (Event Manager, Events Calendar, Tickets, Registrations) up to version 4.0.24 via the style parameter. Exploitation requires authenticated access at Contributor level or higher and can lead to arbitrary file inclusion and executio...

CVE-2025-1770 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.24 via the 'style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

SUSE CVE-2025-29781

The Bare Metal Operator BMO implements a Kubernetes API for managing bare metal hosts in Metal3. Baremetal Operator enables users to load Secret from arbitrary namespaces upon deployment of the namespace scoped Custom Resource BMCEventSubscription. Prior to versions 0.8.1 and 0.9.1, an adversary...

PT-2025-12330

Name of the Vulnerable Software and Affected Versions Nebula Informatics SecHard versions prior to 3.3.0.20220411 Description The issue is related to the incorrect use of privileged APIs, cleartext transmission of sensitive information, and insufficiently protected credentials. This allows for...

CVE-2023-42962

creationtimestamp| type| source ---|---|--- 2025-03-19 20:18:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8139...

CVE-2024-33880

creationtimestamp| type| source ---|---|--- 2025-03-19 18:19:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8115...

CVE-2024-3808

creationtimestamp| type| source ---|---|--- 2025-03-19 15:48:48+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...

Fresh Faces Join the Take Command 2025 Lineup

Take Command 2025 is bringing together some of the sharpest minds in cybersecurity to tackle today’s most urgent challenges. From attacker methodologies and AI-driven security to MDR, red teaming, and exposure management, this year’s virtual event will provide security professionals with practica...

CVE-2025-2290

creationtimestamp| type| source ---|---|--- 2025-03-19 04:48:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8020 2025-03-19 07:57:41+00:00| seen| https://t.me/cvedetector/20624...

kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions, KASAN reports a use-after-free Write in srptrefreshport. This seems to be because an event handler is registered before the srpt devic...

CVE-2025-29930

creationtimestamp| type| source ---|---|--- 2025-03-18 21:55:34+00:00| seen| https://t.me/cvedetector/20601 2025-08-12 13:33:27+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21 03:19:26+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996...

CVE-2025-29907

creationtimestamp| type| source ---|---|--- 2025-03-18 19:02:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7953 2025-03-18 19:48:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114185162030536607 2025-03-18 20:18:44+00:00| seen|...

CVE-2025-25582

creationtimestamp| type| source ---|---|--- 2025-03-18 17:44:04+00:00| seen| https://t.me/cvedetector/20572 2025-03-18 20:18:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihz3ucn2m...

MAL-2025-2599 Malicious code in bsb-family-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 73381c6a90c69556e5d81fd8b66b24eb30907c18f1b24a8a1de3635d533d3284 This package decodes and executes a script during installation to set up a Telegram bot for device event monitoring. However, the code is...

AI innovation requires AI security: Hear what’s new at Microsoft Secure

When you’re secure—innovation happens. But, the fast pace of AI often outpaces traditional security measures, leaving gaps that bad actors can take advantage of. As a security professional, you’re the hero in this battle between protecting vast amounts of data while ensuring AI systems remain...

Improper Privilege Management

Overview Affected versions of this package are vulnerable to Improper Privilege Management when handling namespace scopes for BMCEventSubscription. A user with namespace level roles can access and manipulate secrets from unauthorized namespaces by creating a BMCEventSubscription in a namespace th...