Microsoft Windows Event Tracing 资源管理错误漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism to track and log events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to a resource management error. An attacker could exploit the...

Asynchronous Event Error-Minimizing Noise for Safeguarding Event Dataset

With more event datasets being released online, safeguarding the event dataset against unauthorized usage has become a serious concern for data owners. Unlearnable Examples are proposed to prevent the unauthorized exploitation of image datasets. However, it's unclear how to create unlearnable...

PT-2025-28559 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing affected versions not specified Description: The issue is related to a use after free condition in Windows Event Tracing, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment,...

Microsoft Windows Event Tracing 安全漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing. An attacker could exploit the...

CVE-2025-53543 Kestra allows Stored XSS before 0.22

Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored XSS due to improper handling of HTTP response received. This vulnerability is fixed in 0.22.0...

CVE-2025-53543

CVE-2025-53543 : Kestra (event-driven orchestration platform) is vulnerable to a stored XSS in the error message shown on the execution “Overview” tab due to improper handling of HTTP responses. This issue is addressed in Kestra 0.22.0 and later. Remediation: upgrade to 0.22.0+ (or apply vendor-p...

CVE-2025-5924

creationtimestamp| type| source ---|---|--- 2025-07-07 15:14:14+00:00| seen| Telegram/ISXgwPdrIpRTPMpLikF2rIbDIPtvkDdpffH6-8WgNXxkQ...

Security Bulletin: IBM Event Endpoint Management is affected by multiple vulnerabilities.

Summary IBM Event Endpoint Management is affected by multiple vulnerabilities. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacker to cause high confidentiality and high integrity impact...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.8.1. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU...

CVE-2025-53176

creationtimestamp| type| source ---|---|--- 2025-07-07 03:16:31+00:00| seen| Telegram/8Ewnkzw9DIHDkQKcwYzcMmCjvUlTjrtXwgbcYnRxhvR7TM...

CVE-2025-22101

creationtimestamp| type| source ---|---|--- 2025-07-06 10:14:31+00:00| seen| Telegram/JbJAn-VIkbx56JH7ETtmEX-I7LpDXJEXr-C309X-JNeua2I...

CVE-2025-27446

creationtimestamp| type| source ---|---|--- 2025-07-06 08:36:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltbujuthim2q 2025-07-06 09:53:06+00:00| seen| https://seclists.org/oss-sec/2025/q3/7 2025-07-06 12:15:45+00:00| seen|...

GHSA-JPXC-VMJF-9FCJ

creationtimestamp| type| source ---|---|--- 2025-07-05 06:11:30+00:00| seen| Telegram/1dqgidmIHf5IJFAriKd5AT3fDWrzJYXTjqmUtpExJFAzqOc...

CVE-2025-53365

creationtimestamp| type| source ---|---|--- 2025-07-05 01:38:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt6mqf23372i 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2026-03-...

CVE-2025-34091

A padding oracle vulnerability exists in Google Chrome’s AppBound cookie encryption mechanism due to observable decryption failure behavior in Windows Event Logs when handling malformed ciphertext in SYSTEM-DPAPI-encrypted blobs. A local attacker can repeatedly send malformed ciphertexts to the...

UBUNTU-CVE-2025-38183

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix potential out-of-bounds write in lan743xptpioeventclockget Before calling lan743xptpioeventclockget, the 'channel' value is checked against the maximum value of PCI11X1XPTPIOMAXCHANNELS8. This seems correct and...

CVE-2025-47634

creationtimestamp| type| source ---|---|--- 2025-07-04 12:13:56+00:00| seen| Telegram/1Sng3tIrau-ifR-iGzkkR2pmqkVifqvtqE6rHfHfpzrzHEc...

The vulnerability in the `fs/tracefs/event inode.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/tracefs/event inode.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security Bulletin: Multiple Vulnerabilities in IBM Event Processing

Summary Multiple vulnerabilities were addressed in IBM Event Processing version 1.4.1 Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. When using versions of Babel prior to 7.26.10 and 8.0.0-alpha.17 to compile regular expression...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.8.1. Vulnerability Details CVEID:CVE-2024-47535 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An...