public event security flaws