CVE-2026-32449

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themifyme Themify Event Post themify-event-post allows Stored XSS.This issue affects Themify Event Post: from n/a through = 1.3.4...

CVE-2026-32449 WordPress Themify Event Post plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themifyme Themify Event Post themify-event-post allows Stored XSS.This issue affects Themify Event Post: from n/a through = 1.3.4...

GHSA-4CM8-XPFV-JV6F

creationtimestamp| type| source ---|---|--- 2026-03-13 11:40:06+00:00| seen| https://gist.github.com/alon710/c2c8edafba318da203fe42ab46df2df5...

GHSA-2F24-MG4X-534Q

creationtimestamp| type| source ---|---|--- 2026-03-13 06:40:06+00:00| seen| https://gist.github.com/alon710/741d463a436134d071dd4a30bdde2bd7...

WordPress plugin Themify Event Post 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

The vulnerabilities of the functions event_da_monitor() and error_da_monitor() in the kernel/trace/rv/rvTrace.h header of the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the eventdamonitor and errordamonitor functions in the kernel/trace/rv/rvTrace.h header of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-25201

CVE-2026-32354 Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects… https://t.co/v8Z5hTaLh2...

PT-2026-25293

CVE-2026-32449 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themifyme Themify Event Post themify-event-post allows Stored XSS.This issue affects Themify Eve... https://t.co/ruoArIkzNw...

CVE-2026-3910

creationtimestamp| type| source ---|---|--- 2026-03-12 23:10:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgvji6tzjd2u 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0286/ 2026-03-13 01:52:18+00:00| seen|...

CVE-2021-4458

creationtimestamp| type| source ---|---|--- 2026-03-12 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd32rie2h 2026-06-06 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-06-06 2026-06-19 12:45:09+00:00| exploited|...

CVE-2026-2581

creationtimestamp| type| source ---|---|--- 2026-03-12 20:16:25+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2581 2026-03-12 20:39:28+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mgvazs5nbc2f 2026-03-12 23:25:39+00:00| seen|...

CVE-2026-32139

Dataease is an open source data visualization analysis tool. In DataEase 2.10.19 and earlier, the static resource upload interface allows SVG uploads. However, backend validation only checks whether the XML is parseable and whether the root node is svg. It does not sanitize active content such as...

CVE-2026-31890

Inspektor Gadget (eBPF-based data collection framework for Kubernetes/Linux) contains a DoS vulnerability prior to 0.50.1. When the gadget’s ring-buffer (hard-coded to 256KB) is full, the transfer mechanism via ring-buffers can fail to enqueue events and silently drop them; similarly, a gadget_re...

CVE-2026-31890

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. Prior to 0.50.1, in a situation where the ring-buffer of a gadget is – incidentally or maliciously – already full, the gadget will silently drop events. Th...

CVE-2026-31890 Inspektor Gadget: Tracing Denial of Service via Event Flooding

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. Prior to 0.50.1, in a situation where the ring-buffer of a gadget is – incidentally or maliciously – already full, the gadget will silently drop events. Th...

CVE-2026-31890 Inspektor Gadget: Tracing Denial of Service via Event Flooding

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. Prior to 0.50.1, in a situation where the ring-buffer of a gadget is – incidentally or maliciously – already full, the gadget will silently drop events. Th...

CVE-2026-31890 Inspektor Gadget: Tracing Denial of Service via Event Flooding

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. Prior to 0.50.1, in a situation where the ring-buffer of a gadget is – incidentally or maliciously – already full, the gadget will silently drop events. Th...

CVE-2026-28356

creationtimestamp| type| source ---|---|--- 2026-03-12 17:31:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mguwj7ocuh2c 2026-03-12 20:09:48+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mgv7eod5rta2 2026-03-13 07:40:05+00:00| seen|...

CVE-2019-25536

creationtimestamp| type| source ---|---|--- 2026-03-12 17:26:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguwblh6d72k 2026-04-07 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miuomhtccj2u...

CVE-2019-25537

Netartmedia Event Portal 2.0 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to loginaction.php with malicious SQL payloads in the Email...