CVE-2024-3413

creationtimestamp| type| source ---|---|--- 2025-02-14 10:01:37+00:00| seen| Telegram/xb5J77w5w2i-46xOnb-HMV0flDhUR0kcvUlGvQ3HTsf-Y0...

CVE-2024-3606

creationtimestamp| type| source ---|---|--- 2025-02-14 10:01:37+00:00| seen| Telegram/Hj3nnw3PZt9q7xTuapIeRH0XoYA67e5wuxVOsFpaJgfks7HD...

CVE-2024-20862

creationtimestamp| type| source ---|---|--- 2025-02-14 10:00:35+00:00| seen| Telegram/rJ2E3FyezNoAPhue-SHS2ZhXfVkg95dMnAs0J2eGxJZXVhz...

CVE-2023-26121

creationtimestamp| type| source ---|---|--- 2025-02-14 09:47:01+00:00| seen| Telegram/A4AP3KAlduIca4fj5XKEyppcD0yDv4Ml-zqGbJLEmZ5meRf...

CVE-2024-5045

creationtimestamp| type| source ---|---|--- 2025-02-14 09:46:59+00:00| seen| Telegram/J00PrXUqTuSIMNboG9mH1UBrXh2x0SpMtBrTzN-mznY91xj7...

CVE-2021-3667

creationtimestamp| type| source ---|---|--- 2025-02-14 09:46:58+00:00| seen| Telegram/kpFylxtyN4TDKyoZC3QOG0bAYj82lXuGNIn1E91z1-UYUaeV...

SUSE CVE-2024-12798

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

SUSE CVE-2024-12801

Server-Side Request Forgery SSRF in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modification of DOCTYPE declaration in XML...

PT-2025-7035

Name of the Vulnerable Software and Affected Versions: WP Event Aggregator versions 1.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can...

WordPress plugin WP Event Aggregator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-25195

Zulip is an open source team chat application. A weekly cron job added in 50256f48314250978f521ef439cafa704e056539 demotes channels to being "inactive" after they have not received traffic for 180 days. However, upon doing so, an event was sent to all users in the organization, not just users in...

CVE-2025-26570

creationtimestamp| type| source ---|---|--- 2025-02-13 14:17:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2uvpswbm2h 2025-02-13 14:41:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113997097287133880 2025-02-13 15:11:56+00:00| seen|...

SUSE CVE-2025-21696

In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap When mremaping a memory region previously registered with userfaultfd as write-protected but without UFFDFEATUREEVENTREMAP, an inconsistency in flag clearing leads to a mismatch between t...

PT-2025-7053 · Zulip · Zulip

Name of the Vulnerable Software and Affected Versions: Zulip affected versions not specified Description: A weekly cron job in Zulip demotes channels to being "inactive" after they have not received traffic for 180 days. However, upon doing so, an event was sent to all users in the organization,...

CVE-2024-57605

creationtimestamp| type| source ---|---|--- 2025-02-12 22:19:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7er6tct2g 2025-02-12 23:07:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4146 2025-02-13 00:25:52+00:00| seen| https://t.me/cvedetector/17935...

parse-duration has a Regex Denial of Service that results in event loop delay and out of memory

Summary This report finds 2 availability issues due to the regex used in the parse-duration npm package: 1. An event loop delay due to the CPU-bound operation of resolving the provided string, from a 0.5ms and up to 50ms per one operation, with a varying size from 0.01 MB and up to 4.3 MB...

GHSA-HCRG-FC28-FCG5 parse-duration has a Regex Denial of Service that results in event loop delay and out of memory

Summary This report finds 2 availability issues due to the regex used in the parse-duration npm package: 1. An event loop delay due to the CPU-bound operation of resolving the provided string, from a 0.5ms and up to 50ms per one operation, with a varying size from 0.01 MB and up to 4.3 MB...

CVE-2025-25283

parse-duraton is software that allows users to convert a human readable duration to milliseconds. Versions prior to 2.1.3 are vulnerable to an event loop delay due to the CPU-bound operation of resolving the provided string, from a 0.5ms and up to 50ms per one operation, with a varying size from...

UBUNTU-CVE-2025-0937

Nomad Community and Nomad Enterprise "Nomad" event stream configured with a wildcard namespace can bypass the ACL Policy allowing reads on other namespaces...

CVE-2025-0937 Nomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace

Nomad Community and Nomad Enterprise "Nomad" event stream configured with a wildcard namespace can bypass the ACL Policy allowing reads on other namespaces...