WordPress plugin Awesome Event Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-15040

Name of the Vulnerable Software and Affected Versions fluent-bit version 3.7.2 Description The issue allows a local attacker to cause a denial of service via the consume event function. Recommendations For fluent-bit version 3.7.2, as a temporary workaround, consider disabling the consume event...

PT-2025-14990 · WordPress · Wp Event Manager

Name of the Vulnerable Software and Affected Versions: WP Event Manager versions through 3.1.47 Description: The issue is related to Missing Authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through 3.1.47, update to a...

CVE-2025-29477

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...

Fluent Bit 安全漏洞

Fluent Bit is an open source log processing and analyzing system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit version 3.7.2, which stems from a flaw in the consumeevent function that could lead to a denial of service...

CVE-2025-31462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar cgm-event-calendar allows Reflected XSS.This issue affects CGM Event Calendar: from n/a through = 0.8.5...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

CVE-2024-47213

An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted...

CVE-2024-47215

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected latency,...

CVE-2024-47217

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2024-47212

An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API endpoint of Iglu Server and can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt...

CVE-2025-0272

creationtimestamp| type| source ---|---|--- 2025-04-03 19:25:13+00:00| seen| https://t.me/cvedetector/22001 2025-04-04 20:36:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10551...

CVE-2020-22660

creationtimestamp| type| source ---|---|--- 2025-04-03 18:35:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10316...

CVE-2025-3172

creationtimestamp| type| source ---|---|--- 2025-04-03 18:35:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10297 2025-04-03 21:55:38+00:00| seen| https://t.me/cvedetector/22004...

CVE-2025-32054

creationtimestamp| type| source ---|---|--- 2025-04-03 17:35:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10296 2025-04-03 21:55:51+00:00| seen| https://t.me/cvedetector/22013...

Security Bulletin: Multiple Java Vulnerabilities in IBM Event Streams

Summary Multiple Java SE vulnerabilities were addressed in IBM Event Streams version 11.5.1. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2006-5014

creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10252...

CVE-2006-5738

creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10247...

CVE-2006-5649

creationtimestamp| type| source ---|---|--- 2025-04-03 15:34:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10239...

CVE-2025-31739

Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimalistic Event Manager: from n/a through = 1.1.1...