Malicious Package

Overview lusha-iam-widgets is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-44965

In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, DashboardWidgetActivity are exported with no permission...

EUVD-2026-53946

Contributor Arbitrary File Download in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.14 versions...

Malicious code in @servicetitan/marketing-widgets (npm)

npm/@servicetitan/marketing-widgets is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11894 Malicious code in @servicetitan/marketing-integration-widgets (npm)

npm/@servicetitan/marketing-integration-widgets is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

ais-dom (>=0.109.0b0, <=0.109.7), aws-gate (0.8.8) +10 more potentially affected by CVE-2026-69249 via cryptography (2.9.0)

cryptography PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.109.0b0, =0.3.0a0, =0.109.0b0, =2.0.0rc1, =2.3.7, =1.37.1, =1.37.8 - tornado-widgets 0.0.17 Source cves: CVE-2026-69249 Sourc...

CVE-2026-28147

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through...

EUVD-2026-52227

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through...

CVE-2026-28147: Missing Authorization

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through...

PT-2026-67195

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through...

Atom CMS v2.0 - Cross-Site Scripting Detection

Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php. !/usr/bin/env python3 -- coding: utf-8 -- """Atom CMS v2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Malicious Package

Overview documents-widgets is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

atacworks (0.3.4), atoti-jupyterlab (0.5.0) +4 more potentially affected by CVE-2026-73415 via jupyterlab (3.0.18)

jupyterlab PYPI version 3.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.4 - atoti-jupyterlab 0.5.0 - jupyterlab-apod 0.1.0 - jupyterlab-kernelspy =3.0.0, =1.0.0a0, =1.1.0, =1.2.3 Source cves:...

CVE-2026-15156: Improper Neutralization of Input During Web Page Generation

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Reading Progress Global Color Settings in all versions up to, and including, 6.6.11 due to insufficient input sanitization and output escaping. This mak...

wp2shell_sqli_min_poc

This PoC uses widg...

CVE-2026-54443: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget in src/components/Widgets/RssFeed.vue does not sanitize RSS item link values before rendering feed item titles and Read More links as anchor href attributes, allowing an attacker-controlled feed to provide a...

Malicious code in lusha-iam-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46142505b88a255674663ced6e8bce8c8f3e28c0936e463e07463a7e1331e5af package.json declares the node-fetch dependency pinned to a tarball URL on registry.ctzbg.com, a host unrelated to the npm registry and unrelated to...

atacworks (0.3.4), atoti-jupyterlab (0.5.0) +4 more potentially affected by CVE-2026-42557 via jupyterlab (3.0.18)

jupyterlab PYPI version 3.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.4 - atoti-jupyterlab 0.5.0 - jupyterlab-apod 0.1.0 - jupyterlab-kernelspy =3.0.0, =1.0.0a0, =1.1.0, =1.2.3 Source cves:...

CVE-2026-57718

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

EUVD-2026-43371

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...