CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

The vulnerability of the IBM QRadar SIEM system, related to the transmission of critical information in plaintext, allows a perpetrator to execute a “man-in-the-middle” type attack.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” type attack...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

PT-2025-7493 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM versions 5.13.0 and prior Description: A boolean-based blind SQL Injection vulnerability exists in the EditEventAttendees functionality, allowing an attacker to execute arbitrary SQL queries. The EID parameter is directly concatenat...

PT-2025-7485 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.13.0 Description: A vulnerability exists in ChurchCRM that allows an attacker to execute arbitrary JavaScript in a victim's browser via Reflected Cross-Site Scripting XSS in the EditEventAttendees.php page. This requires...

GHSA-RXJR-CW9Q-CWWG

creationtimestamp| type| source ---|---|--- 2025-02-18 22:34:41+00:00| seen| Telegram/2nL-djrXFFAZli4zgPy3oHY71QtcrdGxrvGK9G6tPsd-u2s...

CVE-2025-26616

creationtimestamp| type| source ---|---|--- 2025-02-18 21:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii6o3h4wy2y 2025-02-18 22:34:38+00:00| published-proof-of-concept| Telegram/4XaNwPTMFyO1Vz7bqzn38wD37G0y60931j9yFHwcc2fnqpY 2025-02-18 22:45:47+00:00| seen|...

CVE-2022-2560

creationtimestamp| type| source ---|---|--- 2025-02-18 21:11:32+00:00| seen| Telegram/7re2U1FxnCa2kNQpvovquwMZPIMPrP98oj2hayY9MZGeSr0...

Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers

Cybersecurity researchers have flagged a credit card stealing malware campaign that has been observed targeting e-commerce sites running Magento by disguising the malicious content within image tags in HTML code in order to stay under the radar. MageCart is the name given to a malware that's...

CVE-2025-23845

creationtimestamp| type| source ---|---|--- 2025-02-17 11:43:18+00:00| seen| https://infosec.exchange/users/cve/statuses/114019047674107538 2025-02-17 12:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepxywjc72y 2025-02-17 14:02:10+00:00| seen|...

CVE-2025-1388

creationtimestamp| type| source ---|---|--- 2025-02-17 04:08:15+00:00| seen| https://infosec.exchange/users/cve/statuses/114017258352790671 2025-02-17 04:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidv5lv5a72k 2025-02-17 05:31:16+00:00| seen|...

CVE-2025-24700

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator wp-event-aggregator allows Reflected XSS.This issue affects WP Event Aggregator: from n/a through = 1.8.2...

CVE-2025-25195

Zulip is an open source team chat application. A weekly cron job added in 50256f48314250978f521ef439cafa704e056539 demotes channels to being "inactive" after they have not received traffic for 180 days. However, upon doing so, an event was sent to all users in the organization, not just users in...

CVE-2020-20522

creationtimestamp| type| source ---|---|--- 2025-02-14 21:09:17+00:00| seen| Telegram/O8gO-783qji96XpdoqJ1l-YjXm4laa8ipCOnx1uFBVObL7Eo...

CVE-2023-49930

creationtimestamp| type| source ---|---|--- 2025-02-14 21:09:17+00:00| seen| Telegram/UWOVnr3KyD9iZQZkvS2w-qN4FjyZ8-XFRoeSj0OSQo81l8I...

CVE-2013-2736

creationtimestamp| type| source ---|---|--- 2025-02-14 21:08:31+00:00| seen| Telegram/1NSIX1wu2gyUOfYjusC-VT-KGW0oSSja3s2e2DaPm70aZ1Y9...

CVE-2013-2731

creationtimestamp| type| source ---|---|--- 2025-02-14 21:08:31+00:00| seen| Telegram/1NSIX1wu2gyUOfYjusC-VT-KGW0oSSja3s2e2DaPm70aZ1Y9...

CVE-2025-25283

parse-duraton is software that allows users to convert a human readable duration to milliseconds. Versions prior to 2.1.3 are vulnerable to an event loop delay due to the CPU-bound operation of resolving the provided string, from a 0.5ms and up to 50ms per one operation, with a varying size from...

CVE-2024-27963

creationtimestamp| type| source ---|---|--- 2025-02-14 17:39:47+00:00| seen| Telegram/rlbnNF-jij67DefhaWE2LbN5fl2EUUZ-rkEH-Fpnh2-vyvll 2025-02-14 21:08:31+00:00| seen| Telegram/hJVpiYh2HTx8q9bf3b9RBRt4iiAXDHGJg-M41F2MAPW7oTYv...

CVE-2024-12651

creationtimestamp| type| source ---|---|--- 2025-02-14 14:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5fc2o5dw2s 2025-02-14 14:48:45+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114002789888956164 2025-02-14 15:12:28+00:00| seen|...