PT-2026-42164

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.20.0 through 9.20.22 BIND 9 versions 9.21.0 through 9.21.21 BIND 9 versions 9.20.9-S1 through 9.20.22-S1 Description A race condition occurs when BIND receives an incoming DNS message signed with SIG0. While validating the...

PT-2026-42165

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.18.36 through 9.18.48 BIND 9 versions 9.20.8 through 9.20.22 BIND 9 versions 9.21.7 through 9.21.21 BIND 9 versions 9.18.36-S1 through 9.18.48-S1 BIND 9 versions 9.20.9-S1 through 9.20.22-S1 Description An unbounded resend lo...

PT-2026-42156

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.20.0 through 9.20.22 BIND 9 versions 9.21.0 through 9.21.21 BIND 9 versions 9.20.9-S1 through 9.20.22-S1 Description A heap use-after-free issue exists within the DNS-over-HTTPS implementation. Use-after-free occurs when an...

CVE-2025-4202

The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cfaddcomment' function in all versions up to, and including, 5.2. This makes it possible for authenticated attackers...

gpac:fuzz_scene: Heap-use-after-free in gf_node_get_id

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5220118736207872 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7766edce0510 Crash...

gdal:s101_fuzzer: Heap-buffer-overflow in DDFSubfieldDefn::ExtractIntData

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4880919399038976 Project: gdal Fuzzing Engine: afl Fuzz Target: s101fuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7bca7dcecf63 Crash State:...

libcoap:persist_fuzzer: Heap-buffer-overflow in coap_pdu_parse_header

Project: https://github.com/obgm/libcoap.git Detailed Report: https://oss-fuzz.com/testcase?key=4807277621346304 Project: libcoap Fuzzing Engine: afl Fuzz Target: persistfuzzer Job Type: aflasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x747c402e1377 Crash...

gpac:fuzz_scene: Heap-use-after-free in lsr_read_id

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4801816704647168 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzscene Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x75c65d0e00e0 Crash State: lsrread...

CVE-2025-4202

The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cfaddcomment' function in all versions up to, and including, 5.2. This makes it possible for authenticated attackers...

EUVD-2025-209886

The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cfaddcomment' function in all versions up to, and including, 5.2. This makes it possible for authenticated attackers...

CVE-2025-4202 Multicollab: Content Team Collaboration and Editorial Workflow <= 5.2 - Missing Authorization to Authenticated (Subscriber+) Collaboration Comment

The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cfaddcomment' function in all versions up to, and including, 5.2. This makes it possible for authenticated attackers...

CVE-2025-4202

CVE-2025-4202 affects the Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress. A missing capability check in the cf_add_comment function across all versions up to 5.2 allows authenticated users with Subscriber-level access or higher to modify data by adding comment...

CVE-2025-4202 Multicollab: Content Team Collaboration and Editorial Workflow <= 5.2 - Missing Authorization to Authenticated (Subscriber+) Collaboration Comment

The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cfaddcomment' function in all versions up to, and including, 5.2. This makes it possible for authenticated attackers...

Exploit for Double Free in Apache Http_Server

cve-2026-23918 Defensive audit tools for CVE-2026-23918...

Cross-site Scripting (XSS)

Gogs is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of data: URI schemes in comments and issue descriptions, which allows an attacker to inject and execute arbitrary JavaScript through malicious links...

graphicsmagick:coder_HEIF_fuzzer: Heap-buffer-overflow in vvdec_push_data2

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5932941304987648 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderHEIFfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_decode_utf8__

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=5856922799767552 Project: md4c Fuzzing Engine: libFuzzer Fuzz Target: fuzz-mdhtml Job Type: libfuzzerasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7841f0a04bcf Crash...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Detailed Report: https://oss-fuzz.com/testcase?key=5728049219043328 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

binutils:fuzz_addr2line: Crash in bfd_getb32

Detailed Report: https://oss-fuzz.com/testcase?key=5703459591749632 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7a61a1de27e0 Crash State: bfdgetb32 nds32elflo12reloc...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=5483973609586688 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...