Adobe Dreamweaver Code Execution

The vulnerability of the Adobe Dreamweaver HTML editor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Dreamweaver Auth Bypass RCE

The vulnerability of the Adobe Dreamweaver HTML editor is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Adobe Dreamweaver Code Execution

The vulnerability of the Adobe Dreamweaver HTML editor is related to its dependence on a vulnerable external component. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Microsoft Visual Studio Code Editor Path Traversal

The vulnerability of Microsoft Visual Studio Code’s editor is related to errors in handling relative pathnames to directories. Exploiting this vulnerability can allow an attacker to gain read and modify access to data remotely...

Widget Factory Joomla Content Editor Improper Access Control Vulnerability

Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users...

MAL-2026-5852 Malicious code in richtext-editor-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe87b6998b0d91eb7eefb71e37d8145b5db79b79dd21bc1ffda10d56d64b6d16 On npm install, postinstall.js base64-decodes a hardcoded URL https://www.jsonkeeper.com/b/7EBZP, fetches its body via axios, and pipes the response...

Malicious code in richtext-editor-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe87b6998b0d91eb7eefb71e37d8145b5db79b79dd21bc1ffda10d56d64b6d16 On npm install, postinstall.js base64-decodes a hardcoded URL https://www.jsonkeeper.com/b/7EBZP, fetches its body via axios, and pipes the response...

Malicious Package

Overview richtext-editor-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-36916

Editor Privilege Escalation in AI Engine = 3.4.9 versions...

CVE-2026-39465

Editor Remote Code Execution RCE in Responsive Slider by MetaSlider = 3.106.0 versions...

CVE-2026-27407

Editor Privilege Escalation in AI Engine = 3.4.9 versions...

CVE-2026-27407

CVE-2026-27407 concerns the WordPress AI Engine plugin, affected versions

CVE-2026-27407 WordPress AI Engine plugin <= 3.4.9 - Privilege Escalation vulnerability

Editor Privilege Escalation in AI Engine = 3.4.9 versions...

CVE-2026-27407 WordPress AI Engine plugin <= 3.4.9 - Privilege Escalation vulnerability

Editor Privilege Escalation in AI Engine = 3.4.9 versions...

CVE-2026-50881

Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Administrator and execute unauthorized account, password, and configuration changes...

com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=14.90.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=14.62.0) +13 more potentially affected by CVE-2026-65899 via org.webjars.npm:dompurify (>=3.1.7, <=3.4.8)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.56.0 Source cves: CVE-2026-65899 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17344553...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.249, <=2.1.0-alpha.251) +7 more potentially affected by CVE-2026-53633 via @vitest/browser (>=3.0.5, <=3.2.4)

@vitest/browser NPM version =3.0.5, =0.0.1, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =2.1.0-alpha.249, =3.8.0, =1.0.1, =0.0.2, =0.0.5 Source cves: CVE-2026-53633 Source advisory: GHSA-G8MR-85JM-7XHM...

EUVD-2026-37002

Cursor is a code editor built for programming with AI. In versions prior to 3.0.0, the Cursor Desktop could execute workspace-defined Claude hook commands from .claude/settings.local.json without dedicated user approval. A malicious workspace or agent-created file could configure hooks that run...

com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=14.90.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=14.62.0) +13 more potentially affected by CVE-2026-49459 via org.webjars.npm:dompurify (>=3.1.7, <=3.3.0)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.55.1 Source cves: CVE-2026-49459 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17344539...

NPM: launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows

NPM: launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows vulnerability discovered by ? in WordPress Npm vite-plus versions = 0.1.23...