EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2025-1547)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved:ntb: intel: Fix the NULL vs ISERR bug for debugfscreatedir The...

Pwn2Own Berlin 2025: Windows 11, VMware, Firefox and Others Hacked

The beginning of Pwn2Own Berlin 2025, hosted at the OffensiveCon conference, has concluded its first two days with…...

GHSA-QX2M-RCPC-V43V

creationtimestamp| type| source ---|---|--- 2025-05-16 14:11:05+00:00| seen| https://poliverso.org/objects/0477a01e-0aa1c1a3-596b69f6d4d09712 2025-05-17 11:21:04+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lpegg44dal2f 2025-05-17 12:00:05+00:00| seen|...

OESA-2025-1513 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the following trace caused by receiving HCIEVDISCONNPHYLINKCOMPLETE which does call hciconndel without fir...

CVE-2025-20043

creationtimestamp| type| source ---|---|--- 2025-05-16 04:34:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16621...

CVE-2024-35252

creationtimestamp| type| source ---|---|--- 2025-05-16 01:34:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16605...

CVE-2024-37325

creationtimestamp| type| source ---|---|--- 2025-05-16 01:34:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16600...

CVE-2023-7297

creationtimestamp| type| source ---|---|--- 2025-05-15 20:33:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16571...

CVE-2024-2643

creationtimestamp| type| source ---|---|--- 2025-05-15 20:33:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16565...

CVE-2024-8700

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars...

CVE-2024-8700

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars...

CVE-2024-6711

The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks...

CVE-2024-6711

The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks...

CVE-2024-6711

CVE-2024-6711 affects the Event Tickets with Ticket Scanner WordPress plugin prior to 2.3.8. It enables stored cross-site scripting due to insufficient sanitization/escaping of certain parameters, potentially allowing an attacker with a role as high as admin to inject script. The cited sources in...

CVE-2024-6711 Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS

The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks...

CVE-2024-6711 Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS

The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks...

CVE-2024-8701 Event Calendar <= 1.0.4 - Admin+ Stored XSS

The events-calendar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-8700 Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars...

CVE-2024-8700

CVE-2024-8700 affects the WordPress plugin Event Calendar (versions up to 1.0.4). The issue is lack of authorization checks on delete actions, allowing unauthenticated users to delete calendars. The connected sources confirm the vulnerability exists but do not provide a fixed version or patch det...

CVE-2024-8700 Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars...