CVE-2026-62057 WordPress Divi Contact Form 7 plugin <= 4.1.0 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Fahim Reza Divi Contact Form 7 cf7-styler-for-divi allows Code Injection.This issue affects Divi Contact Form 7: from n/a through 4.1.0...

CVE-2025-55182-realistic-poc

CVE-2025-55182: React Server Components RCE A minimal proof of concept demonstrating the critical Remote Code Execution vulnerability in [email protected]. What is CVE-2025-55182? A pre-authentication RCE vulnerability in React Server Components that allows attackers to execute arbitrary cod...

MAL-2026-18421 Malicious code in vas-tops2-core-clients-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8f34cc049db12f4eae49cc8977f2d6e09de6f9c7a49e46962f53466fa32122b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18423 Malicious code in vas-tops2-digital-assistant-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9200deb4c1b7b103f7bfb70a824828ba4a94b5ae4450e6d2379b1edb6ae8162d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18424 Malicious code in vas-tops2-reportingui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba605f5250413f2e4298788eca10f4f24ce20e6f91c6c9f6df3549d147cf6506 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-core-client-cleanup-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3626e72813ef48b7fa712d21bcfc04b886915dac40f1bf4073caeee0c33be4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18422 Malicious code in vas-tops2-core-property-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b717592099bb17727ccdcad2fb928bf90c9cddaba9439bb084d62b715ed4c605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18420 Malicious code in vas-tops2-core-client-cleanup-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3626e72813ef48b7fa712d21bcfc04b886915dac40f1bf4073caeee0c33be4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-digital-assistant-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9200deb4c1b7b103f7bfb70a824828ba4a94b5ae4450e6d2379b1edb6ae8162d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18415 Malicious code in @tops2/digital-assistant-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60912457b183aa62c0101d164fd7accb4e1d9886de72fb59cb4ba69dfea4309c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-reportingui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba605f5250413f2e4298788eca10f4f24ce20e6f91c6c9f6df3549d147cf6506 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18419 Malicious code in vas-tops2-bidmatrix-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4abeeac694ba2d227a41a8e82d0525018201d486e23b94805684af4e07d644d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18418 Malicious code in tefeest-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80a97b5efe6344f25a34ed662f62f49fa91b032c477766b4fbad94f3ff15c5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLEANSTART-2026-UR62545 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

CVE-2026-27140 affects multiple packages. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass. See references for individual vulnerability details...

CLEANSTART-2026-FD95330 discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary

CVE-2025-61732 affects multiple packages. A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary. See references for individual vulnerability details...

php2shell-pmb-poc

php2shell → PMB: unauthenticated RCE chain Authorized penet...

CVE-2026-119777 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

EUVD-2026-114266

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

CVE-2026-119777

A flaw exists in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow occurs while parsing the profile, tier, and level fields, which can lead to a stack-based buffer overflow . This vulnerability could allow an attacker to caus...

CVE-2026-119777 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...