CVE-2025-9850

The Evenium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eveniumsingleevent' shortcode in all versions up to, and including, 1.3.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2025-8398

creationtimestamp| type| source ---|---|--- 2025-09-11 07:36:49+00:00| seen| Telegram/89AsF9jACXW2-Eur35B82Pf9PBNawla7hC8QKTokGBrdjc...

CVE-2025-9850 Evenium <= 1.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Evenium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eveniumsingleevent' shortcode in all versions up to, and including, 1.3.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2025-9850

The Evenium WordPress plugin (versions

CVE-2025-9910

creationtimestamp| type| source ---|---|--- 2025-09-11 07:06:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyk6qb3roj2t...

Malicious Package

Overview @team-event/v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @team-event/models is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @team-event/services is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47051 Malicious code in @team-event/v2 (npm)

The package @team-event/v2 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc9d7a4f41e5d6a4af9a15c05d4e0023f5f141a75b5c62d116bb229a1ea7541d Any computer that has this package installed or running should be considered fully...

MAL-2025-47050 Malicious code in @team-event/team-event-amplitude-events (npm)

The package @team-event/team-event-amplitude-events was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fec4944bd01591db16329984b9a3301e3d76ea26f8ec3f5dc1a14807f9c11ff6 Any computer that has this package installed or running should b...

Malicious code in @team-event/models (npm)

The package @team-event/models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6769b5703bfb1b74cb1db2c7bf3e87a4abfcc35e4e3fd588c284080cb96583e2 Any computer that has this package installed or running should be considered fully...

Malicious code in @team-event/services (npm)

The package @team-event/services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc63f4d31ebe9d65d548b1000719f57dc3476e34a98f87c0dab3ab0c62322b06 Any computer that has this package installed or running should be considered fully...

MAL-2025-47048 Malicious code in @team-event/models (npm)

The package @team-event/models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6769b5703bfb1b74cb1db2c7bf3e87a4abfcc35e4e3fd588c284080cb96583e2 Any computer that has this package installed or running should be considered fully...

MAL-2025-47049 Malicious code in @team-event/services (npm)

The package @team-event/services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc63f4d31ebe9d65d548b1000719f57dc3476e34a98f87c0dab3ab0c62322b06 Any computer that has this package installed or running should be considered fully...

[SECURITY] Fedora 41 Update: rust-crypto-auditing-event-broker-0.2.3-3.fc41

Event broker for crypto-auditing project...

[SECURITY] Fedora 41 Update: rust-crypto-auditing-client-0.2.3-2.fc41

Event broker client for crypto-auditing project...

[SECURITY] Fedora 41 Update: rust-crypto-auditing-agent-0.2.3-3.fc41

Event collector agent for crypto-auditing project...

[SECURITY] Fedora 42 Update: rust-crypto-auditing-client-0.2.3-4.fc42

Event broker client for crypto-auditing project...

[SECURITY] Fedora 42 Update: rust-crypto-auditing-event-broker-0.2.3-5.fc42

Event broker for crypto-auditing project...

PT-2025-37117

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Event Management System version 1.0 Description A reflected Cross-Site Scripting XSS issue exists in the register.php script. The mobile parameter is not properly validated, and its value is echoed in the HTTP response without...