CVE-2025-57728

CVE-2025-57728 affects JetBrains IntelliJ IDEA prior to 2025.2. The vulnerability is due to improper access control that allows a Code With Me guest to discover hidden files. Documented in multiple feeds (Red Hat, CNVD, NVD, OSV, etc.), with no public exploit details provided in the sources. Reme...

CVE-2025-57727

Affected product: JetBrains IntelliJ IDEA. Issue: credentials disclosure via remote reference in versions prior to 2025.2. Root cause details are not provided beyond the capability. Impact: confidentiality could be exposed. Remediation: upgrade to 2025.2 or later (versioning implied by sources). ...

PT-2025-34030 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2025.2 Description: Unexpected plugin startup was possible due to automatic LSP server start. Recommendations: Update JetBrains IntelliJ IDEA to version 2025.2 or later...

PT-2025-34029 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2025.2 Description: Improper access control in JetBrains IntelliJ IDEA allowed a Code With Me guest to discover hidden files. Recommendations: Update JetBrains IntelliJ IDEA to version 2025.2 or later...

This Week in Spring - August 5th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's August 5th! Which means we're only 20 days away until SpringOne 2025! Have you registered? There's so much to cover this week, so let's dive right into it! Spring Shell 3.4.1 is out! - the new release includes a number o...

CVE-2025-49543

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...

CVE-2024-44107

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution...

CVE-2024-8012

An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44105

Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to obtain OS credentials...

CVE-2024-44104

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...