24461 matches found
Assessing SIEM effectiveness
A SIEM is a complex system offering broad and flexible threat detection capabilities. Due to its complexity, its effectiveness heavily depends on how it is configured and what data sources are connected to it. A one-time SIEM setup during implementation is not enough: both the organization's...
PuneethReddyHC Event Management 安全漏洞
PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A security vulnerability exists in PuneethReddyHC Event Management version 1.0, which stems from...
PT-2025-52847
Name of the Vulnerable Software and Affected Versions PuneethReddyHC event-management version 1.0 Description Improper input handling in the /Grocery/search products itname.php file allows for SQL injection via the sitem name POST parameter. Crafted payloads can alter query logic and disclose...
PT-2025-52734
Name of the Vulnerable Software and Affected Versions WordPress Calendar plugin versions prior to 1.3.17 Description The Calendar plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and output escaping in the event desc parameter...
WordPress plugin Calendar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-65354
CVE-2025-65354 affects PuneethReddyHC event-management version 1.0. The Red Hat and NVD entries, along with other feeds, describe improper input handling in /Grocery/search_products_itname.php that allows SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and ...
WordPress Calendar plugin <= 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'event_desc' vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'eventdesc' vulnerability discovered by Hieus in WordPress Plugin Calendar versions = 1.3.16...
CVE-2025-68476 KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential
KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA resource that uses TriggerAuthentication to configure HashiCorp Vault authentication. The...
CVE-2025-34469
creationtimestamp| type| source ---|---|--- 2025-12-20 17:42:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-83jg-m2pm-4jxj 2026-01-01 00:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd52qua3q2u 2026-01-01 21:02:58+00:00| seen|...
CVE-2023-53958
creationtimestamp| type| source ---|---|--- 2025-12-20 00:23:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maewud6guu2q...
CVE-2025-11901
creationtimestamp| type| source ---|---|--- 2025-12-19 16:05:39+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mae2zt7n632l 2025-12-21 13:02:26+00:00| seen| https://t.me/sysodmins/27923 2025-12-22 08:39:26+00:00| published-proof-of-concept| https://t.me/xakepru/18676...
CVE-2025-14861
creationtimestamp| type| source ---|---|--- 2025-12-19 15:45:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3madzvkszcf24 2026-04-13 18:00:31+00:00| seen| Telegram/lcTTDbyY4PLCe4Ts-gMkb76cUYnmPfJtZnOpjvQrzbn1wRw...
CVE-2025-68461
creationtimestamp| type| source ---|---|--- 2025-12-19 15:05:16+00:00| published-proof-of-concept| Telegram/-BSo0zA61vWCA4Jhqv9IkIbnyI3oU0cuabSJHE6-K1C6zFk 2025-12-19 16:33:00+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-roundcube-webmail-1 2025-12-20 10:34:29+00:00| seen|...
CVE-2025-56157
creationtimestamp| type| source ---|---|--- 2025-12-19 07:42:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115745104181415797 2025-12-19 16:41:46+00:00| seen| https://gist.github.com/gmh5225/56a03049c269e715bfc21a6b9fced8f0 2026-01-21 17:31:02+00:00| seen|...
CVE-2025-64677
creationtimestamp| type| source ---|---|--- 2025-12-18 23:36:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macdqjmoi62c...
CVE-2025-68112
ChurchCRM is an open-source church management system. In versions prior to 6.5.3, a SQL injection vulnerability in ChurchCRM's Event Attendee Editor allows authenticated users to execute arbitrary SQL commands, leading to complete database compromise, administrative credential theft, and potentia...
CVE-2023-53940 Codigo Markdown Editor 1.0.1 Electron Arbitrary Code Execution via Markdown File
Codigo Markdown Editor 1.0.1 contains a code execution vulnerability that allows attackers to run arbitrary system commands by crafting a malicious markdown file. Attackers can embed a video source with an onerror event that executes shell commands through Node.js childprocess module when the fil...
CVE-2023-53940 Codigo Markdown Editor 1.0.1 Electron Arbitrary Code Execution via Markdown File
Codigo Markdown Editor 1.0.1 contains a code execution vulnerability that allows attackers to run arbitrary system commands by crafting a malicious markdown file. Attackers can embed a video source with an onerror event that executes shell commands through Node.js childprocess module when the fil...