CVE-2026-25996

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

CVE-2026-25996 Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

CVE-2025-14014

creationtimestamp| type| source ---|---|--- 2026-02-12 15:51:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meoduiqdr323 2026-02-12 15:52:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meodw5kv6v2v...

CVE-2026-1320

creationtimestamp| type| source ---|---|--- 2026-02-12 14:30:22+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meo7e3tadj2h 2026-02-12 14:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116058136270781151...

CVE-2020-37178

creationtimestamp| type| source ---|---|--- 2026-02-12 10:15:32+00:00| seen| https://bsky.app/profile/hbrks.mastodon.social.ap.brid.gy/post/3menr4be24ga2 2026-02-12 10:16:26+00:00| seen| https://bsky.app/profile/hbrks.mastodon.social.ap.brid.gy/post/3menr5yntlwt2...

CVE-2026-1729

creationtimestamp| type| source ---|---|--- 2026-02-12 03:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3memyslhib72e 2026-02-12 03:00:52+00:00| seen| https://infosec.exchange/users/offseq/statuses/116055423747881235 2026-02-12 07:00:35+00:00| seen|...

CVE-2026-1922

The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ecs-list-events shortcode message attribute in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping on user supplied...

CVE-2026-0958

creationtimestamp| type| source ---|---|--- 2026-02-11 12:21:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3melhorpbvs2v 2026-02-11 13:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3melmweqeno2j...

CVE-2025-8099

creationtimestamp| type| source ---|---|--- 2026-02-11 12:21:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3melhokrcuu27 2026-02-11 13:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3melmweqeno2j...

FreeBSD : FreeBSD -- blocklistd(8) socket leak (8d8012e5-0705-11f1-8148-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8d8012e5-0705-11f1-8148-bc241121aa0a advisory. Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: kubevela, argo-workflows-fips, steampipe, gomplate-fips, gitlab-rails-ce, flux-fips, kots, amazon-ssm-agent, flux-source-watcher, pulumi-language-java, teleport, zarf, amazon-ssm-agent-fips, kubescape, chezmoi, goreleaser, argocd-image-updater, trufflehog-fips,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: kubevela, argo-workflows-fips, steampipe, gomplate-fips, gitlab-rails-ce, flux-fips, kots, amazon-ssm-agent, flux-source-watcher, pulumi-language-java, teleport, zarf, amazon-ssm-agent-fips, kubescape, chezmoi, goreleaser, argocd-image-updater, trufflehog-fips,...

CVE-2026-1922

The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ecs-list-events shortcode message attribute in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping on user supplied...

CVE-2026-1922

The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ecs-list-events shortcode message attribute in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping on user supplied...

CVE-2026-1922 The Events Calendar Shortcode & Block <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ecs-list-events shortcode message attribute in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping on user supplied...

CVE-2026-1922

CVE-2026-1922 : The Events Calendar Shortcode & Block plugin for WordPress contains a stored XSS vulnerability in the ecs-list-events shortcode, via the message attribute. It affects all versions up to 3.1.2 and arises from insufficient input sanitization and output escaping on user-supplied attr...

CVE-2026-1922 The Events Calendar Shortcode & Block <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ecs-list-events shortcode message attribute in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping on user supplied...

FreeBSD Security Advisory - FreeBSD-SA-26:03.blocklistd

FreeBSD Security Advisory - Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a...

FreeBSD -- blocklistd(8) socket leak

Problem Description: Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a null...

WordPress plugin The Events Calendar Shortcode & Block 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...