WordPress Tickera - WordPress Event Ticketing plugin <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update vulnerability

WordPress Tickera - WordPress Event Ticketing plugin = 3.5.6.4 - Missing Authorization to Authenticated Subscriber+ Event/Post Status Update vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Tickera versions = 3.5.6.4...

CVE-2025-13689

creationtimestamp| type| source ---|---|--- 2026-02-17 23:19:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf3pbfo4za2h 2026-02-17 23:20:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf3pcn3ryx2v 2026-02-17 23:21:44+00:00| seen|...

GHSA-QRQ5-WJGG-RVQW

creationtimestamp| type| source ---|---|--- 2026-02-17 22:10:30+00:00| seen| https://gist.github.com/alon710/5931fababa23f0bc307c5d5d7e952c58...

From Super Bowl to World Cup: How Akamai Delivers the Perfect Event

Learn why Akamai is at the core of the biggest online sporting events, and how we help you be successful in the most critical moments...

GHSA-HR7J-63V7-VJ7G

creationtimestamp| type| source ---|---|--- 2026-02-17 17:40:31+00:00| seen| https://gist.github.com/alon710/272cb414eb96f2e41f70f56e070bb918...

CVE-2026-26046

creationtimestamp| type| source ---|---|--- 2026-02-17 13:10:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mf2n76nw5322 2026-02-26 21:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfs5vis76a2m...

Security Bulletin: IBM Event Streams is vulnerable to a denial of service

Summary IBM Event Streams is vulnerable to a denial of service due to improper buffer release in quarkus-resteasy. CVE-2025-1634 Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low...

Security Bulletin: IBM Event Streams is vulnerable to an OutOfMemoryError (CVE-2025-1948)

Summary IBM Event Streams is vulnerable to an OutOfMemoryError due to uncontrolled memory allocation in Jetty HTTP/2. Vulnerability Details CVEID:CVE-2025-1948 DESCRIPTION: In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 setting...

Security Bulletin: IBM Event Endpoint Management is vulnerable to information disclosure (CVE-2025-68429)

Summary IBM Event Endpoint Management may be vulnerable to information disclosure. Vulnerability Details CVEID:CVE-2025-68429 DESCRIPTION: Storybook is a frontend workshop for building user interface components and pages in isolation. A vulnerability present starting in versions 7.0.0 and prior t...

CVE-2026-0966

creationtimestamp| type| source ---|---|--- 2026-02-17 06:01:52+00:00| seen| https://bsky.app/profile/slackers.it/post/3mezvbgx6ze2e 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-03-31 17:00:00+00:00| seen|...

CVE-2026-2452

creationtimestamp| type| source ---|---|--- 2026-02-17 03:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mezl5at2qc2w 2026-02-17 03:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116083735436269267...

Bluetooth RFCOMM 1.1 Signal-Triggered Air-Gap Interaction

This project demonstrates how Flipper Zero can be used to interact with devices in an Air-Gap context using Bluetooth RFCOMM signals. The system monitors RSSI signal strength and uses statistical peak detection Z-Score analysis to identify significant signal spikes from target devices. When a pea...

CVE-2026-1333

creationtimestamp| type| source ---|---|--- 2026-02-16 22:35:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mez4cwdevv25 2026-02-17 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116083381352983641 2026-02-19 05:00:00+00:00| seen|...

kernel: Linux kernel use-after-free in eventpoll

A flaw was found in the Linux kernel's eventpoll epoll mechanism. A local attacker could exploit a use-after-free vulnerability due to incorrect handling of the 'ep' refcount while the 'ep' mutex is still held. This can lead to memory corruption, potentially allowing the attacker to achieve...

CVE-2026-26369

creationtimestamp| type| source ---|---|--- 2026-02-15 23:30:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116077246133807686 2026-02-15 23:30:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mewowaxbxu2h 2026-02-16 15:00:19+00:00| seen|...

CVE-2026-1983

The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing nonce validation on the event deletion functionality. This makes it possible for unauthenticated attackers to delete arbitrary...

CVE-2026-1987

The Scheduler Widget plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 0.1.6. This is due to the schedulerwidgetajaxsaveevent function lacking proper authorization checks and ownership verification when updating events. This makes it...

CVE-2026-23153

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

CVE-2026-23153

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

CVE-2026-23153

CVE-2026-23153 concerns the Linux kernel regarding a race condition in the FireWire core when enumerating the transaction list without a lock during AR response processing, potentially impacting AT request completion handling. The issue is resolved by moving the timer start for split-transaction ...