CVE-2025-1180

creationtimestamp| type| source ---|---|--- 2025-02-11 07:34:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113984096811446641 2025-02-11 11:29:58+00:00| seen| https://t.me/cvedetector/17680 2025-02-11 12:19:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhvnfvopgu2...

CVE-2024-3449

creationtimestamp| type| source ---|---|--- 2025-02-11 02:18:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulsqqw4a22...

PT-2025-6264 · Fortinet · Fortianalyzer

Name of the Vulnerable Software and Affected Versions: Fortinet FortiAnalyzer versions 6.4.0 through 7.6.0 Description: The issue allows an unauthorized actor to cause information disclosure via filter manipulation, potentially leading to the exposure of sensitive information. This is related to...

Insertion of sensitive information into Event log

...

This Week in Spring - February 11th, 2025

Hi, Spring fans! It's almost Valentine's day, and let me just say: I love the Spring community! It's such an exciting and interesting place to be. Thank you everyone for all that you do. I'm busy preparing for ConFoo, in Montreal, Canada, and for Devnexus, in Atlanta, Georgia. If you're around be...

GHSA-PW7M-P9Q7-357P

creationtimestamp| type| source ---|---|--- 2025-02-10 22:15:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113981896093771933...

CVE-2024-46429

creationtimestamp| type| source ---|---|--- 2025-02-10 18:54:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113981105527920026 2025-02-10 18:58:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113981122747611903 2025-02-10 19:16:10+00:00| seen|...

GHSA-37WC-H8XC-5HC4

creationtimestamp| type| source ---|---|--- 2025-02-10 17:41:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113980818586300320...

The vulnerabilities of the ReSharper plugin of the Microsoft Visual Studio software, the cross-platform integrated development environment from JetBrains called Rider, the performance profiler dotTrace, and the ETW Host Service at the kernel and application level, related to improper process management, allow attackers to gain elevated privileges.

The vulnerabilities of the ReSharper plugin of the Microsoft Visual Studio software, the cross-platform integrated development environment from JetBrains called Rider, the performance profiler dotTrace, and the kernel-level and application-level Event Tracking Service Host Service are related to...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49858)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49858 advisory. - In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for...

PT-2025-16771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the dlm component, where writing a positive value to event done could lead to a NULL pointer dereference...

CVE-2025-25110

Missing Authorization vulnerability in Metagauss Event Kikfyre kikfyre-events-calendar-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Kikfyre: from n/a through = 2.1.8...

[SECURITY] Fedora 41 Update: rust-crypto-auditing-agent-0.2.3-2.fc41

Event collector agent for crypto-auditing project...

CVE-2024-11133

The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handlepdfdownloadrequest' function in all versions up to, and including, 3.9.9.5. This makes it possible for unauthenticated attackers to download event tickets...

CVE-2025-25163

creationtimestamp| type| source ---|---|--- 2025-02-07 10:18:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqjxgfm24 2025-02-07 12:08:38+00:00| seen| https://t.me/cvedetector/17478 2025-02-07 13:45:58+00:00| seen|...

CVE-2025-25110

Missing Authorization vulnerability in Metagauss Event Kikfyre kikfyre-events-calendar-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Kikfyre: from n/a through = 2.1.8...

CVE-2025-25110

CVE-2025-25110: WordPress Event Kikfyre plugin

CVE-2025-25110 WordPress Event Kikfyre plugin <= 2.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Metagauss Event Kikfyre kikfyre-events-calendar-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Kikfyre: from n/a through = 2.1.8...

CVE-2025-25110 WordPress Event Kikfyre plugin <= 2.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Metagauss Event Kikfyre allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Kikfyre: from n/a through 2.1.8...

WordPress plugin Event Kikfyre 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exis...