23684 matches found
CVE-2026-42662
CVE-2026-42662 affects the WordPress Event Tickets plugin (versions
EUVD-2026-36827
Unauthenticated Bypass Vulnerability in Event Tickets = 5.27.5 versions...
CVE-2026-34898 WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce = 1.5.3 versions...
CVE-2026-34898
The CVE-2026-34898 entry concerns the WordPress plugin “Event Tickets Manager for WooCommerce” (versions <= 1.5.3). It describes Unauthenticated Broken Access Control, with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N, base score 7.5 (HIGH). The vulnerability impacts integrity (...
GHSA-R47G-FVHR-H676 DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM
INPLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM CWE: CWE-79 XSS — Improper Neutralization of Input During Web Page Generation via CWE-693 Protection Mechanism Failure — silent no-op when forceRemove is called on a parent-less node Summa...
CVE-2026-5230
creationtimestamp| type| source ---|---|--- 2026-06-15 16:37:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modpsvyaeb2b...
CVE-2025-71329
A flaw was found in image-size. A remote attacker can exploit this vulnerability by providing a specially crafted image buffer that contains a zero-valued size field within a recognized box-type. This malicious input can trigger an infinite loop in the JXL or HEIF image parsers, leading to a...
CVE-2026-12216
creationtimestamp| type| source ---|---|--- 2026-06-15 07:56:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocspir3xf2m...
PT-2026-49453
Unauthenticated Bypass Vulnerability in Event Tickets = 5.27.5 versions...
PT-2026-49365
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce = 1.5.3 versions...
PT-2026-49420
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.8 versions...
PT-2026-49558
Name of the Vulnerable Software and Affected Versions DOMPurify versions prior to 3.4.6 Description When using DOMPurify.sanitizeroot, IN PLACE: true with a element as the root, an attacker can bypass attribute sanitization. This occurs if a descendant element has a name attribute that clobbers...
wannacry-soc-lab
WannaCry SOC Investigation Lab Overview This project simu...
CVE-2026-50010
creationtimestamp| type| source ---|---|--- 2026-06-13 05:05:01+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo5i6l7zbl2i 2026-06-15 23:41:15+00:00| seen| https://gist.github.com/alon710/f42a6954ca4bbe69929b54a65ee51645 2026-07-10 16:18:17+00:00| seen|...
CVE-2026-54230
A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the ONOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and...
CVE-2026-54229
A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DDOPENREADONLY and calls ddchown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows ...
CVE-2026-54230
CVE-2026-54230 describes a symlink-following vulnerability in ABRT’s libreport post-create event handler scripts. The scripts write output via shell redirections without O_NOFOLLOW, so if a target file is replaced with a symlink, a root process can overwrite arbitrary files on the system. This is...
CVE-2026-54229
A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DDOPENREADONLY and calls ddchown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows ...
SUSE CVE-2025-71330
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attackers can craft an ICNS buffer containing valid magic bytes and a zero-valued entry length field to...
EUVD-2026-36625
OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to validate channel type metadata. Attackers can bypass intended DM policy decisions by sending crafted Mattermost events missing channel type information to process restricted conte...