24989 matches found
CVE-2023-51296
PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting XSS in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters which allows attackers to execute arbitrary code...
CVE-2023-51298
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection due to insufficient input validation on the Languages section Labels field in System Options used to construct CSV files, potentially enabling remote code execution via crafted CSV payloads. Public writeups (e.g., PacketStorm) ...
CVE-2023-51298
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51303
PHPJabbers Event Ticketing System v1.0 is affected by a Multiple HTML Injection (XSS) in parameters lid, name, plugin_sms_api_key, plugin_sms_country_code, and title. Root cause is HTML injection in those fields; impact described as potential HTML code execution in affected pages. Remediation sta...
CVE-2023-51303
PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...
PT-2025-7493 · Churchcrm · Churchcrm
Name of the Vulnerable Software and Affected Versions: ChurchCRM versions 5.13.0 and prior Description: A boolean-based blind SQL Injection vulnerability exists in the EditEventAttendees functionality, allowing an attacker to execute arbitrary SQL queries. The EID parameter is directly concatenat...
PT-2025-7485 · Churchcrm · Churchcrm
Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.13.0 Description: A vulnerability exists in ChurchCRM that allows an attacker to execute arbitrary JavaScript in a victim's browser via Reflected Cross-Site Scripting XSS in the EditEventAttendees.php page. This requires...
CVE-2023-51303
PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...
GHSA-RXJR-CW9Q-CWWG
creationtimestamp| type| source ---|---|--- 2025-02-18 22:34:41+00:00| seen| Telegram/2nL-djrXFFAZli4zgPy3oHY71QtcrdGxrvGK9G6tPsd-u2s...
CVE-2025-26616
creationtimestamp| type| source ---|---|--- 2025-02-18 21:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii6o3h4wy2y 2025-02-18 22:34:38+00:00| published-proof-of-concept| Telegram/4XaNwPTMFyO1Vz7bqzn38wD37G0y60931j9yFHwcc2fnqpY 2025-02-18 22:45:47+00:00| seen|...
CVE-2022-2560
creationtimestamp| type| source ---|---|--- 2025-02-18 21:11:32+00:00| seen| Telegram/7re2U1FxnCa2kNQpvovquwMZPIMPrP98oj2hayY9MZGeSr0...
Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers
Cybersecurity researchers have flagged a credit card stealing malware campaign that has been observed targeting e-commerce sites running Magento by disguising the malicious content within image tags in HTML code in order to stay under the radar. MageCart is the name given to a malware that's...
CVE-2025-23845
creationtimestamp| type| source ---|---|--- 2025-02-17 11:43:18+00:00| seen| https://infosec.exchange/users/cve/statuses/114019047674107538 2025-02-17 12:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepxywjc72y 2025-02-17 14:02:10+00:00| seen|...
CVE-2025-1388
creationtimestamp| type| source ---|---|--- 2025-02-17 04:08:15+00:00| seen| https://infosec.exchange/users/cve/statuses/114017258352790671 2025-02-17 04:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidv5lv5a72k 2025-02-17 05:31:16+00:00| seen|...
CVE-2025-24700
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator wp-event-aggregator allows Reflected XSS.This issue affects WP Event Aggregator: from n/a through = 1.8.2...
CVE-2025-25195
Zulip is an open source team chat application. A weekly cron job added in 50256f48314250978f521ef439cafa704e056539 demotes channels to being "inactive" after they have not received traffic for 180 days. However, upon doing so, an event was sent to all users in the organization, not just users in...
CVE-2020-20522
creationtimestamp| type| source ---|---|--- 2025-02-14 21:09:17+00:00| seen| Telegram/O8gO-783qji96XpdoqJ1l-YjXm4laa8ipCOnx1uFBVObL7Eo...
CVE-2023-49930
creationtimestamp| type| source ---|---|--- 2025-02-14 21:09:17+00:00| seen| Telegram/UWOVnr3KyD9iZQZkvS2w-qN4FjyZ8-XFRoeSj0OSQo81l8I...