CVE-2025-22236

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

UBUNTU-CVE-2025-22239

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

UBUNTU-CVE-2025-22236

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

CVE-2025-22239

CVE-2025-22239 – Salt Master event injection : The Salt Master’s _minion_event method can be abused by an authorized minion to push arbitrary events onto the master's event bus, enabling potential impact on integrity and confidentiality (I, C) with low availability impact. The advisory notes this...

CVE-2025-22239 CVE-2025-22239 salt advisory

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

CVE-2025-22239 CVE-2025-22239 salt advisory

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

CVE-2025-22236 CVE-2025-22236 salt advisory

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

CVE-2025-22236

CVE-2025-22236 concerns Salt minion: an attacker with a minion key could craft a message to trigger a job on other minions via the minion event bus authorization bypass. Technical details in connected sources show this affects Salt Minion components (v3xxx series with 3007.0+ listed as affected) ...

WordPress WP Event Manager Improper Filename Control Vulnerability

WordPress WP Event Manager is an event management plugin designed specifically for WordPress that allows users to create, manage and promote various types of events including conferences, seminars, exhibitions, parties and more. A filename miscontrol vulnerability exists in WordPress WP Event...

Salt 安全漏洞

Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from an event bus authorization bypass that could lead an attacker to execute jobs on other minions...

Salt 安全漏洞

Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from an authorized minion that can inject arbitrary events into the main event bus...

GHSA-4C2H-67QQ-VM87

creationtimestamp| type| source ---|---|--- 2025-06-12 19:33:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18221 2025-06-12 19:34:31+00:00| seen| Telegram/pmCQczjONs0GfJ4fUtzY9Rs7uNvrLwRQOu1OBXvD7CpRkk...

CVE-2024-44905

creationtimestamp| type| source ---|---|--- 2025-06-12 16:34:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18198 2025-06-12 17:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrgfozgvfb2e...

CVE-2025-49467

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

CVE-2025-48937

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. matrix-sdk-crypto since version 0.8.0 and up to 0.11.0 does not correctly validate the sender of an encrypted event. Accordingly, a malicious homeserver operator can modify events served to clients, making those event...

CVE-2025-49197

creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:18+00:00| seen| Telegram/wgoTb5XaYjt4edW9eGqUUS797b0TcQmpar0c1bJk2kSM 2025-06-17 19:39:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18659...

CVE-2023-39456

creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18184...

CVE-2023-41752

creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18183...

CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

CVE-2025-49467

CVE-2025-49467 describes a SQL injection in the JEvents Joomla extension. Affected: JEvents component for Joomla versions prior to 3.6.88 and prior to 3.6.82.1. Root cause: vulnerability in publicly accessible actions that list events by date ranges, allowing injection through the date-range quer...