CVE-2023-33005

creationtimestamp| type| source ---|---|--- 2025-01-23 16:03:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2760...

GHSA-36GQ-35J3-P9R9

creationtimestamp| type| source ---|---|--- 2025-01-23 15:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113878382100891566 2025-01-23 15:34:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113878400720241278 2025-04-26 00:07:36+00:00| published-proof-of-concept|...

CVE-2024-12118

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the htmltag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

WordPress plugin The Events Calendar 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

GHSA-HGM9-2Q42-C7F3

creationtimestamp| type| source ---|---|--- 2025-01-22 22:02:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2673...

CVE-2023-32956

creationtimestamp| type| source ---|---|--- 2025-01-22 21:02:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2644...

CVE-2025-24400

CVE-2025-24400 affects the Jenkins Eiffel Broadcaster Plugin (versions 2.8.0–2.10.2). The vulnerability arises because the plugin uses the credential ID as the cache key during signing operations, allowing an attacker who can create a credential with the same ID in a different credentials store t...

CVE-2025-23237

creationtimestamp| type| source ---|---|--- 2025-01-22 06:03:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2516 2025-01-22 06:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcprlbgc72f 2025-01-22 06:44:21+00:00| seen|...

CVE-2025-23083

With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage...

CVE-2025-21567

creationtimestamp| type| source ---|---|--- 2025-01-21 21:00:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2469 2025-01-21 21:19:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrrl2cvq2b 2025-01-21 22:04:57+00:00| seen|...

CVE-2025-21560

CVE-2025-21560 affects Oracle Agile PLM Framework (component: SDK) with vulnerable 9.3.6. A low-privilege, network-access attacker (HTTP) can compromise the framework, potentially gaining unauthorized access to critical data or all data accessible by Oracle Agile PLM Framework. Concrete details f...

CVE-2011-0676

creationtimestamp| type| source ---|---|--- 2025-01-21 18:00:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2431...

CVE-2025-22718

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in roninwp FAT Event Lite fat-event-lite allows Stored XSS.This issue affects FAT Event Lite: from n/a through = 1.1...

CVE-2024-49700

creationtimestamp| type| source ---|---|--- 2025-01-21 13:59:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113866702074462926 2025-01-21 14:01:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2398 2025-01-21 14:16:06+00:00| seen|...

CVE-2025-22718

CVE-2025-22718 : In roninwp FAT Event Lite (fat-event-lite), an authenticated Stored XSS vulnerability exists due to improper input neutralization during web page generation, affecting FAT Event Lite

CVE-2025-22718 WordPress FAT Event Lite plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in roninwp FAT Event Lite fat-event-lite allows Stored XSS.This issue affects FAT Event Lite: from n/a through = 1.1...

CVE-2025-21657

creationtimestamp| type| source ---|---|--- 2025-01-21 12:58:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113866460104161830 2025-01-21 13:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqxw2b62h 2025-01-21 13:39:33+00:00| seen|...

CVE-2024-57930

CVE-2024-57930 : Linux kernel tracing fix. The vulnerability arises because process_string() did not consistently handle cases where a %s argument in TP_printk() referred to an array, risking unsafe dereferences of string data in trace events. The fix expands process_string() to treat references ...

CVE-2024-11226

creationtimestamp| type| source ---|---|--- 2025-01-21 11:11:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113866040020188158 2025-01-21 11:15:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113866055363310432 2025-01-21 11:15:30+00:00| seen|...

WordPress plugin FAT Event Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...