24770 matches found
Microsoft Windows Event Tracing 后置链接漏洞
Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A backlink vulnerability exists in Microsoft Windows Event Tracing. An attacker could exploit this...
CLSA-2025-1736778412 kernel: Fix of 17 CVEs
tracing: Free buffers when a used dynamic event is removed CVE-2022-49006 - ASoC: ops: Check bounds for second channel in sndsocputvolswsx CVE-2022-48951 - ext4: fix slab-use-after-free in ext4splitextentat CVE-2024-49884 - ext4: fix bug on in ext4escacheextent as ext4splitextentat failed...
CVE-2024-11396 Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.3 via the Visitors List Export file. During the export, a CSV file is created in the wp-content folder with a hardcoded filena...
CVE-2024-11396 Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.3 via the Visitors List Export file. During the export, a CSV file is created in the wp-content folder with a hardcoded filena...
CVE-2024-11396
CVE-2024-11396 : The WordPress plugin Event Monster – Event Management, Tickets Booking, Upcoming Event (versions up to 1.4.3) allows information exposure via the Visitors List Export. During export, a CSV is created in wp-content with a public filename, letting unauthenticated attackers access v...
GHSA-QJH3-4J3H-VMWP
creationtimestamp| type| source ---|---|--- 2025-01-13 21:43:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113823227726464727 2025-01-13 22:10:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1418...
CVE-2022-36244
creationtimestamp| type| source ---|---|--- 2025-01-13 21:11:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1384...
CVE-2024-44771
creationtimestamp| type| source ---|---|--- 2025-01-13 18:22:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113822434675262534 2025-01-13 21:15:27+00:00| seen| https://t.me/cvedetector/15167 2025-01-14 18:02:21+00:00| seen|...
The vulnerability of the logback-core module in the QOS monitoring system allows a perpetrator to execute arbitrary code.
The vulnerability of the logback-core module in the QOS monitoring system is related to the failure to take measures to neutralize special elements used in the expression language operator. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by using the...
WordPress plugin Event Monster 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
The vulnerability of the hci_user_confirm_request_evt() function in the net/bluetooth/hci_event.c module of the Linux operating system allows a intruder to compromise the confidentiality of the protected information.
The vulnerability of the hciuserconfirmrequestevt function in the net/bluetooth/hcievent.c module of the Linux kernel is related to improper authorization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of protected information...
CISA: Security and Resiliency Guide - Outdoor Events Annex
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CVE-2024-57849 s390/cpum_sf: Handle CPU hotplug remove during sampling
In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHPAPPERFS390SFONLINE -- s390pmusfofflinecpu ... CPUHPAPPERFONLINE -- perfeventexitcpu The s390...
CVE-2025-0392
creationtimestamp| type| source ---|---|--- 2025-01-11 11:03:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113809386627182709 2025-01-11 11:03:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1293 2025-01-11 11:15:24+00:00| seen|...
CVE-2024-12204
creationtimestamp| type| source ---|---|--- 2025-01-11 02:43:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113807419152458754 2025-01-11 03:04:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1259 2025-01-11 03:15:54+00:00| seen|...
SUSE CVE-2024-56654
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix using rcureadunlock while iterating The usage of rcureadunlock while inside listforeachentryrcu is not safe since for the most part entries fetched this way shall be treated as rcudereference: Note that t...
CVE-2024-47517
creationtimestamp| type| source ---|---|--- 2025-01-10 21:50:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113806267094662222 2025-01-10 22:05:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1252 2025-01-10 22:15:57+00:00| seen|...
CVE-2024-9131
creationtimestamp| type| source ---|---|--- 2025-01-10 21:31:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113806193460936773 2025-01-10 22:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7slg6rh2x 2025-01-10 22:43:26+00:00| seen|...