CVE-2024-47215

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected latency,...

CVE-2024-47217

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2024-47213

An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

CVE-2025-29477

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...

CVE-2025-32278

creationtimestamp| type| source ---|---|--- 2025-04-04 16:36:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10492 2025-04-04 17:07:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpylubc2x 2025-04-04 20:32:10+00:00| seen| https://t.me/cvedetector/22155...

CVE-2025-32225

Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through = 3.2.0...

CVE-2025-32225 WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through = 3.2.0...

CVE-2025-32225 WordPress WP Event Manager plugin <= 3.1.47 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Event Manager WP Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Event Manager: from n/a through 3.1.47...

CVE-2025-3249

creationtimestamp| type| source ---|---|--- 2025-04-04 14:36:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10460 2025-04-04 18:01:19+00:00| seen| https://t.me/cvedetector/22132...

CVE-2025-31416

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through = 2.8.4...

CVE-2025-31416

creationtimestamp| type| source ---|---|--- 2025-04-04 13:35:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10440 2025-04-04 18:01:24+00:00| seen| https://t.me/cvedetector/22137...

WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Event Manager versions = 3.2.0...

CVE-2025-31416 WordPress Awesome Event Booking plugin <= 2.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through 2.8.4...

CVE-2025-31416

CVE-2025-31416 corresponds to a Reflected XSS in the Awesome Event Booking WordPress plugin (affected: Awesome Event Booking up to 2.8.4). The issue stems from improper input neutralization during web page generation and is exploitable via remote access (network) with user interaction required. T...

CVE-2025-31416 WordPress Awesome Event Booking plugin <= 2.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Reflected XSS.This issue affects Awesome Event Booking: from n/a through = 2.8.4...

CVE-2025-2797

creationtimestamp| type| source ---|---|--- 2025-04-04 07:36:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10414 2025-04-04 10:29:18+00:00| seen| https://t.me/cvedetector/22086 2025-04-04 15:37:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10481 2025-04-04...

CVE-2025-2159

creationtimestamp| type| source ---|---|--- 2025-04-04 06:35:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10407 2025-04-04 10:29:32+00:00| seen| https://t.me/cvedetector/22096...

CVE-2025-3208

creationtimestamp| type| source ---|---|--- 2025-04-04 04:35:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10388 2025-04-04 07:58:40+00:00| seen| https://t.me/cvedetector/22074...

SUSE CVE-2025-21948

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...