PT-2025-25391

Name of the Vulnerable Software and Affected Versions SaltStack Salt versions 3007.0 and later Description The issue concerns an authorization bypass in the Minion event bus. An attacker with access to a minion key can craft a message to potentially execute a job on other minions. Recommendations...

PT-2025-34363

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists in the packet set ring and packet notifier functions within the net/packet module. This occurs when packet set ring releases po-bind lock, allowing another thre...

PT-2026-5998

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The st lsm6dsx acc channels array within the Linux kernel's IIO subsystem contains a non-NULL event spec field, incorrectly indicating support for IIO events on sensors that lack this...

PT-2025-30787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability exists in the Linux kernel related to RDMA/mlx5, specifically concerning the initialization of obj event-obj sub list before its insertion using xa insert. This can lead ...

PT-2026-2894

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-630.el9.x86 64+debug 1 Description A flaw exists in the Linux kernel's RDMA/irdma subsystem, specifically within the irdma net event function. The function could dereference an invalid memory location unde...

PT-2025-34645 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

CVE-2023-21563

creationtimestamp| type| source ---|---|--- 2024-12-31 20:58:19+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lemws6n4vd2r 2025-01-01 19:08:33+00:00| published-proof-of-concept| https://t.me/itsecnews/5076 2025-01-04 08:39:32+00:00| seen|...

WordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin HT Event versions = 1.4.6...

WordPress Event Espresso plugin <= 5.0.28.decaf - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Event Espresso 4 Decaf versions = 5.0.28.decaf...

GHSA-HQ4H-W933-JM6C

creationtimestamp| type| source ---|---|--- 2024-12-30 16:20:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113742682794610427...

CVE-2024-56714

In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paths that can cause us to try to destroy the workqueue more than once, so let's be sure we're checking for that. The case where this popped up was in an AER eve...

CVE-2024-56755

creationtimestamp| type| source ---|---|--- 2024-12-29 12:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legypbbgo522 2024-12-29 13:10:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113736273833535812 2024-12-29 14:02:02+00:00| seen|...

CVE-2024-56714

In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paths that can cause us to try to destroy the workqueue more than once, so let's be sure we're checking for that. The case where this popped up was in an AER eve...

CVE-2024-13007

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-13007

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

UBUNTU-CVE-2024-56714

In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paths that can cause us to try to destroy the workqueue more than once, so let's be sure we're checking for that. The case where this popped up was in an AER eve...

CVE-2024-56714 ionic: no double destroy workqueue

In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paths that can cause us to try to destroy the workqueue more than once, so let's be sure we're checking for that. The case where this popped up was in an AER eve...

CVE-2024-56714 ionic: no double destroy workqueue

In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paths that can cause us to try to destroy the workqueue more than once, so let's be sure we're checking for that. The case where this popped up was in an AER eve...

CVE-2024-56714

Technical details for CVE-2024-56714 are not publicly available in the provided documents. No explicit affected products, root cause, or remediation are listed here. Monitor for updates.

CVE-2024-13007 Codezips Event Management System contact.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...