CVE-2025-10764

A vulnerability was identified in SeriaWei ZKEACMS up to 4.3. This affects the function Edit of the file src/ZKEACMS.EventAction/Controllers/PendingTaskController.cs of the component Event Action System. Such manipulation of the argument Data leads to server-side request forgery. The attack may b...

AZL-67643 CVE-2025-39886 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...

CVE-2025-39886

In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...

CVE-2025-39886 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()

In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...

CVE-2025-39886 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()

In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...

GHSA-PRRF-397V-83XH

creationtimestamp| type| source ---|---|--- 2025-09-23 03:04:11+00:00| seen| https://gist.github.com/konard/0588944bf0af8e1132d0c68d1c1d2711 2025-10-26 10:04:24+00:00| seen| https://gist.github.com/konard/ae5644ee09391620c298630fdcf2722d 2025-10-26 10:16:49+00:00| seen|...

kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...

RHEL 10 : kernel (RHSA-2025:16354)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16354 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: usb: dwc3: gadget: check tha...

PT-2025-39176

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A remote code execution issue exists in WSO2 products due to insufficient input validation within the event processor admin service. An attacker with administrative access can deploy a...

WSO2 Identity Server 安全漏洞

WSO2 Identity Server IS is an identity server from WSO2, Inc. A security vulnerability exists in WSO2 Identity Server IS that stems from improper validation of Event Processor Management Service inputs, which could lead to remote code execution...

CVE-2025-36064

creationtimestamp| type| source ---|---|--- 2025-09-22 20:52:40+00:00| seen| Telegram/rKCK0bHxvLVY2rItyftgAr0hjdu0bvB-iaZyfzTi0Dw69Q...

CVE-2025-58244

creationtimestamp| type| source ---|---|--- 2025-09-22 19:59:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzh72hcts62g...

WordPress Event Rocket Plugin <= 3.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by muhammad yudha in WordPress Plugin Event Rocket versions = 3.3...

CVE-2025-53452

Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Rocket: from n/a through 3.3...

WordPress CP Multi View Event Calendar plugin <= 1.4.34 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin CP Multi View Event Calendar versions = 1.4.34...

CVE-2025-53452 WordPress Event Rocket Plugin <= 3.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Rocket: from n/a through 3.3...

CVE-2025-53452

Missing Authorization vulnerability in Barry Event Rocket event-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Rocket: from n/a through = 3.3...

CVE-2025-53452

The CVE-2025-53452 entry covers a Missing Authorization vulnerability in Event Rocket WordPress plugin (range: from n/a through 3.3). The underlying issue is improper access control/configuration allowing unauthorized actions. Public details in the provided documents are limited to affected softw...

CVE-2025-53452 WordPress Event Rocket Plugin <= 3.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Rocket: from n/a through 3.3...

CVE-2025-58009

The CVE-2025-58009 entry concerns CP Multi View Events Calendar for WordPress with a Missing Authorization flaw. Affected versions are listed as up to 1.4.32 (range includes unspecified start). The vulnerability arises from incorrectly configured access control security levels, enabling unauthori...