Linux io_uring Use-After-Free Exploit

The Linux kernel suffers from a use-after-free of struct ioevfd because ioeventfddosignal frees an object when the refcount reaches zero without waiting for the required grace period. Summary UAF of struct ioevfd because ioeventfddosignal frees an object when the refcount reaches zero without...

CVE-2025-25770

creationtimestamp| type| source ---|---|--- 2025-02-21 22:17:12+00:00| seen| https://t.me/cvedetector/18684 2025-02-24 17:21:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5172 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2024-5113

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:27+00:00| seen| Telegram/OE92hMtDo0Ldfy3ZqSV2j3A7EyXCyNZtR1RN6FwvoL06zp...

CVE-2024-2673

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:24+00:00| seen| Telegram/PkeWSDYDuaD1vtQCXjSQFumiB3YiNUHEGfRM-umiNEUAvqJd...

CVE-2024-2671

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:24+00:00| seen| Telegram/vvvn-moTykdH4FlT3BV6PFTzUlyEz3ezNv3A1sENi9qbXD...

CVE-2024-4918

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:23+00:00| seen| Telegram/fOmpjUU8780JHYzs1gqspyqBhxCfR-SYORAYFTyWxciNPi...

CVE-2024-4912

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:23+00:00| seen| Telegram/H187AQ49Y1ktRAkHoV2oqH1VepPr4in1ZPQTcaVzKEUoZZir...

CVE-2024-57176

creationtimestamp| type| source ---|---|--- 2025-02-21 18:19:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4950 2025-02-21 19:46:42+00:00| seen| https://t.me/cvedetector/18671 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2025-25878

creationtimestamp| type| source ---|---|--- 2025-02-21 18:18:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4938 2025-02-21 19:46:35+00:00| seen| https://t.me/cvedetector/18665...

CVE-2024-55156

creationtimestamp| type| source ---|---|--- 2025-02-21 18:18:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4937 2025-02-21 19:46:41+00:00| seen| https://t.me/cvedetector/18669 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2025-1537

creationtimestamp| type| source ---|---|--- 2025-02-21 15:23:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4905 2025-02-21 18:06:09+00:00| seen| https://t.me/cvedetector/18658 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2025-1402

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajaxticketdelete' function in all versions up to, and including, 5.19.1.1. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2025-1402

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajaxticketdelete' function in all versions up to, and including, 5.19.1.1. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2025-1402 Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajaxticketdelete' function in all versions up to, and including, 5.19.1.1. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2025-1402

CVE-2025-1402 affects the WordPress Event Tickets and Registration plugin. A missing capability check in the ajax_ticket_delete function in all versions up to 5.19.1.1 allows authenticated attackers with Contributor+ access to delete arbitrary Attendee tickets, causing unauthorized data loss. The...

CVE-2025-1402 Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajaxticketdelete' function in all versions up to, and including, 5.19.1.1. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2024-13648

creationtimestamp| type| source ---|---|--- 2025-02-21 10:20:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4871 2025-02-21 12:35:18+00:00| seen| Telegram/-xBIPsZP-f0defBViLndVmNYN6G7Povb8ypfeFV9IYqr4H 2025-02-21 13:55:34+00:00| seen| https://t.me/cvedetector/18646...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

PT-2025-7501 · WordPress · Event Tickets/Registration

Name of the Vulnerable Software and Affected Versions: Event Tickets and Registration plugin for WordPress versions up to, and including, 5.19.1.1 Description: The issue is related to a missing capability check on the ajax ticket delete function, allowing authenticated attackers with...