CVE-2024-4527

creationtimestamp| type| source ---|---|--- 2025-02-19 19:13:57+00:00| seen| Telegram/Q4P7dTrG2FTV6Ba9KIa51j1NrKQ7vR3tJLVC-gs3NeU7c1N...

CVE-2023-0467

creationtimestamp| type| source ---|---|--- 2025-02-19 19:13:55+00:00| seen| Telegram/jAsRozUfpsApJ26biwFloohPvhmgGKFJ41gvClbKgTbw...

SUSE-SU-2025:0590-1 Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues: - CVE-2025-24970: incorrect validation of packets by SslHandler can lead to a native crash. bsc1237037 - CVE-2025-25193: unsafe reading of environment files can lead to an application crash. bsc1237038 Update to netty version 4.1.1...

CVE-2023-51293

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51296

Summary: CVE-2023-51296 affects PHPJabbers Event Booking Calendar v4.0, with a stored Cross-Site Scripting (XSS) flaw in the fields named in the description (name, plugin_sms_api_key, plugin_sms_country_code, title) that can lead to arbitrary code execution. The exploit details in the packetstorm...

CVE-2023-51293

CVE-2023-51293 affects PHPJabbers Event Booking Calendar v4.0. The root cause is a lack of rate limiting in the Forgot Password and Email Settings features, allowing an attacker to trigger a large volume of email messages for a legitimate user, which can cause a Denial of Service. The CVSS base s...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is affected by a Multiple HTML Injection (XSS) in parameters lid, name, plugin_sms_api_key, plugin_sms_country_code, and title. Root cause is HTML injection in those fields; impact described as potential HTML code execution in affected pages. Remediation sta...

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection due to insufficient input validation on the Languages section Labels field in System Options used to construct CSV files, potentially enabling remote code execution via crafted CSV payloads. Public writeups (e.g., PacketStorm) ...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51293

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51296

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting XSS in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters which allows attackers to execute arbitrary code...

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

The vulnerability of the IBM QRadar SIEM system, related to the transmission of critical information in plaintext, allows a perpetrator to execute a “man-in-the-middle” type attack.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” type attack...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

PT-2025-7493 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM versions 5.13.0 and prior Description: A boolean-based blind SQL Injection vulnerability exists in the EditEventAttendees functionality, allowing an attacker to execute arbitrary SQL queries. The EID parameter is directly concatenat...

PT-2025-7485 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.13.0 Description: A vulnerability exists in ChurchCRM that allows an attacker to execute arbitrary JavaScript in a victim's browser via Reflected Cross-Site Scripting XSS in the EditEventAttendees.php page. This requires...

GHSA-RXJR-CW9Q-CWWG

creationtimestamp| type| source ---|---|--- 2025-02-18 22:34:41+00:00| seen| Telegram/2nL-djrXFFAZli4zgPy3oHY71QtcrdGxrvGK9G6tPsd-u2s...

CVE-2025-26616

creationtimestamp| type| source ---|---|--- 2025-02-18 21:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii6o3h4wy2y 2025-02-18 22:34:38+00:00| published-proof-of-concept| Telegram/4XaNwPTMFyO1Vz7bqzn38wD37G0y60931j9yFHwcc2fnqpY 2025-02-18 22:45:47+00:00| seen|...

CVE-2022-2560

creationtimestamp| type| source ---|---|--- 2025-02-18 21:11:32+00:00| seen| Telegram/7re2U1FxnCa2kNQpvovquwMZPIMPrP98oj2hayY9MZGeSr0...

Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers

Cybersecurity researchers have flagged a credit card stealing malware campaign that has been observed targeting e-commerce sites running Magento by disguising the malicious content within image tags in HTML code in order to stay under the radar. MageCart is the name given to a malware that's...