CERTFR-2022-ALE-004

creationtimestamp| type| source ---|---|--- 2025-01-29 16:42:35+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfzm5n3c27...

CERTFR-2020-ALE-018

creationtimestamp| type| source ---|---|--- 2025-01-29 16:35:07+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfmaveza2y...

CERTFR-2020-ALE-009

creationtimestamp| type| source ---|---|--- 2025-01-29 16:33:15+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfivejvn2g...

CERTFR-2018-ALE-006

creationtimestamp| type| source ---|---|--- 2025-01-29 16:24:17+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgveyue3fm2k...

GHSA-F8Q2-7FV5-CG93

creationtimestamp| type| source ---|---|--- 2025-01-29 15:30:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113912358161091347...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.5.2 Vulnerability Details CVEID:CVE-2024-43800 DESCRIPTION: expressjs serve-static is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this...

CVE-2024-54461

creationtimestamp| type| source ---|---|--- 2025-01-29 11:57:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113911519018810757 2025-01-29 12:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgux4xjmjn2h 2025-01-29 15:14:40+00:00| seen|...

RHSA-2025:0325

creationtimestamp| type| source ---|---|--- 2025-01-29 10:10:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3368 2025-02-26 14:25:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5493...

Security Bulletin: IBM Event Streams is vulnerable to a denial of service attack due to the Apache Commons Compress component (CVE-2024-25710, CVE-2024-26308).

Summary IBM Event Streams is vulnerable to a denial of service due to the Apache Commons Compress component. Commons Compress is a library that creates a standard interface for the most widely used compression and archiving formats. Vulnerability Details CVEID:CVE-2024-25710 DESCRIPTION: Apache...

GHSA-WQ36-MXF8-HV62

creationtimestamp| type| source ---|---|--- 2025-01-28 17:02:26+00:00| seen| Telegram/cYfPl4Qca19rkqt8FYd7E49qcDewBCCVh3ubWy62Agpv4JE...

CVE-2024-11135

The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventergetattendees' function in all versions up to, and including, 3.9.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Thi...

CVE-2014-4608

creationtimestamp| type| source ---|---|--- 2025-01-28 03:22:55+00:00| seen| Telegram/NgL8djqURFf-wT2WisqVtoXKjBTwFjgsdiHpw3J2jDJbcJQb...

CVE-2024-4487

creationtimestamp| type| source ---|---|--- 2025-01-28 03:16:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3204...

PT-2025-1624 · WordPress · Eventer

Name of the Vulnerable Software and Affected Versions: Eventer plugin for WordPress versions up to, and including, 3.9.8 Description: The issue concerns a SQL injection vulnerability via the event parameter in the eventer get attendees function. This vulnerability is due to insufficient escaping ...

WordPress plugin Eventer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent, related to the modification of expected data, allows a perpetrator to gain access to modify the data.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to modifications to expected data. Exploiting this vulnerability could allow attackers to gain access to and modify data...

PT-2026-5128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a swevent hrtimer may not be properly destroyed. A change to hrtimer try to cancel in perf swevent cancel hrtimer could leave the hrtimer active...

WordPress WP Customer Area plugin < 8.2.5 - Event Log Deletion via CSRF vulnerability

Event Log Deletion via CSRF vulnerability discovered by Krugov Artyom in WordPress Plugin WP Customer Area versions 8.2.5...

GHSA-2V3R-GVQ5-QQGH

creationtimestamp| type| source ---|---|--- 2025-01-27 21:08:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3178...

CERTFR-2025-ALE-002

creationtimestamp| type| source ---|---|--- 2025-01-27 17:39:06+00:00| seen| https://bsky.app/profile/auditum.fr/post/3lgqiascdk32d 2025-01-29 13:50:09+00:00| seen| https://bsky.app/profile/test-cvp.bsky.social/post/3lgv4fbh6wp2k...