CVE-2025-3419 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the proxyimage function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on...

CVE-2025-3419 Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the proxyimage function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on...

CVE-2025-3419

CVE-2025-3419 affects the WordPress plugin family “Event Manager, Events Calendar, Tickets, Registrations – Eventin” (

CVE-2025-20155

creationtimestamp| type| source ---|---|--- 2025-05-08 04:22:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15466...

PT-2025-20339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the USB gadget functionality, specifically in the dwc3 driver. The problem occurs when the event count read...

PT-2025-20388 · Phpjabbers · Phpjabbers Event Booking Calendar

Name of the Vulnerable Software and Affected Versions: PHPJabbers Event Booking Calendar version 4.0 Description: The issue concerns multiple HTML injection vulnerabilities in the name, plugin sms api key, plugin sms country code, and title parameters. This allows for potential malicious code...

CVE-2023-51295

CVE-2023-51295 affects PHPJabbers Event Booking Calendar v4.0, with multiple HTML injection vulnerabilities in parameters name, plugin_sms_api_key, plugin_sms_country_code, and title. The issue is a stored HTML injection risk documented across multiple sources; impact is low to moderate (CVSS v3....

CVE-2023-51295

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51295

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check event count boundaries, which could lead to out-of-bounds access...

GHSA-63XR-GVJV-R6XV

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15456...

libevent bug fix update

An update is available for libevent. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libevent packages provide an abstract asynchronous event notification...

CVE-2025-47679

creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15371 2025-05-07 19:00:59+00:00| seen| https://t.me/cvedetector/24731...

CVE-2025-47676

creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15369 2025-05-07 19:00:59+00:00| seen| https://t.me/cvedetector/24732...

CVE-2025-47668

creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15365 2025-05-07 18:26:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkctwsj2p 2025-05-07 19:00:52+00:00| seen|...

CVE-2025-47472

creationtimestamp| type| source ---|---|--- 2025-05-07 17:23:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15361...

CVE-2025-12362

creationtimestamp| type| source ---|---|--- 2025-05-07 15:48:27+00:00| seen| https://t.me/NinjaSec/300...

CVE-2025-12383

creationtimestamp| type| source ---|---|--- 2025-05-07 15:48:27+00:00| seen| https://t.me/NinjaSec/300 2025-11-18 16:14:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5w53w67l62u 2026-01-16 15:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mckgwvnwux2z...

CVE-2025-46827

Graylog has a vulnerability (CVE-2025-46827) where an HTML form in an Event Definition Remediation Step can leak user session cookies if an attacker has create-event-definition rights and the victim can view alerts, with an active input to receive form data. Affected versions are before 6.0.14, 6...

CVE-2025-46827 Graylog Allows Session Takeover via Insufficient HTML Sanitization

Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting an HTML form as part of an Event Definition Remediation Step field. For this attack to succeed, the attacker needs a user account with...