24763 matches found
CVE-2025-3621
creationtimestamp| type| source ---|---|--- 2025-07-15 08:24:53+00:00| seen| Telegram/jiq-rOEL9YSlMg8Ja-PW1HxbjYWUh3fx5c2XwTkQ6UNskqg...
This Week in Spring - July 15th, 2025
Hi, Spring fans! It's already the 15th of July! We're closer to 2026 than we are to 2024. And time's sure flying. Like I will, tomorrow. I'll be flying to Denver for the amazing UBERCONF software show! I'll be doing a workshop and two talks, and if you're there, I hope you'll come say "hi"! Let's...
SUSE CVE-2025-53549
The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection vulnerability in the EventCache::findeventwithrelations method of matrix-sdk 0.11 and 0.12 allows malicious room members to execute arbitrary SQL commands in Matrix clients that...
CVE-2025-53885
Directus Flows logs can disclose sensitive user data via the Log to Console operation. Affected: Directus real-time API/dashboard prior to 11.9.0 (versions 9.0.0–11.8.x). Root cause: logging unfettered input during user create/update events, enabling a malicious admin to view other users’ data. I...
CVE-2025-53819
creationtimestamp| type| source ---|---|--- 2025-07-14 21:23:01+00:00| seen| Telegram/bonnwBsmIXP6UfzF4HHhmczBUZ2ZCA6ayWuUIAXuN6JEQ...
CVE-2025-53640
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields such as ACLs could be misused to dump basic user details such ...
CVE-2025-53640
CVE-2025-53640 – Indico user details disclosure via API/endpoint . Indico (event management platform) uses Flask-Multipass for authentication. Until fixed in v3.3.7, a specific endpoint that presents user details in fields such as ACLs could be abused to bulk-dump basic user data (name, affiliati...
CVE-2025-53640 Indico vulnerable to user enumeration via API endpoint
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields such as ACLs could be misused to dump basic user details such ...
CVE-2025-53640 Indico vulnerable to user enumeration via API endpoint
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields such as ACLs could be misused to dump basic user details such ...
Report from the Cambridge Cybercrime Conference
The Cambridge Cybercrime Conference was held on 23 June. Summaries of the presentations are here...
CVE-2025-25180
creationtimestamp| type| source ---|---|--- 2025-07-14 02:26:32+00:00| seen| Telegram/BG1k5rtUtqd96aRwtpny8SJ-IDKjPvwJXEwe5LNhNMsyyp4...
The vulnerability of the Setup and Boot Event Collection function in Microsoft Windows systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Setup and Boot Event Collection function in Microsoft Windows systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
WordPress Events Manager Plugin SQL Injection Vulnerability
WordPress Events Manager plugin is a full-featured event management tool that supports event registration, ticket sales, booking management and recurring event settings. The WordPress Events Manager plugin suffers from a SQL injection vulnerability that stems from the plugin's failure to adequate...
PT-2025-37247
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel where the host may access stale data in the event ring due to a device updating the events ring pointer before updating the event contents. This can...
PT-2025-29511
Name of the Vulnerable Software and Affected Versions: Indico versions 2.2 through 3.3.7 Description: Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. An endpoint used to display details of users listed in certain fields could be...
CVE-2025-52954
creationtimestamp| type| source ---|---|--- 2025-07-11 15:24:12+00:00| seen| Telegram/7hdWvzymsvMz6-ZyD9Yi7ERCn1nXN5uCafzcDekC8Mcc 2026-01-23 21:25:30+00:00| seen| Telegram/yGqzgYQc-4J5XY87W8s44ridAroexFkO0Vh6dcUxSF7Pu0...
CVE-2025-52951
creationtimestamp| type| source ---|---|--- 2025-07-11 15:24:11+00:00| seen| Telegram/kkSDHnydT8KB8qrfX5aVARNi4bfYfHed2L6Zq5TyfaKN4M...
CVE-2025-52948
creationtimestamp| type| source ---|---|--- 2025-07-11 15:24:04+00:00| seen| Telegram/KwcT9JHG2ASMkC6MSKh65jZfiKcM9S3aOqCXeH2ZsSJMwGo...
matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`
The SqliteEventCacheStore::findeventwithrelations function constructs SQL queries using format! with unescaped input, allowing an attacker to inject arbitrary SQL. This results in a SQL injection vulnerability...
