1332144 matches found
CVE-2026-104657 Missing Integrity Verification in Progress Software Fiddler Download & Setup Skill
Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which allows an attacker to compromise or influence a release component and execute attacker-controlled code when a user runs the skill. On macOS, the skill stages the package at ...
EUVD-2026-118358
Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which allows an attacker to compromise or influence a release component and execute attacker-controlled code when a user runs the skill. On macOS, the skill stages the package at ...
synaptic-sentinel
SYNAPTIC Sentinel The vibe-coding security sentinel. An Apache-2.0 agentic security toolkit for projects where most of the code is written by AI. Five deterministic scouts catch the syntactic problems; a Brain Layer BYOK Anthropic decides what really matters and how to fix it — all inside the IDE...
CVE-2026-90436
UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...
CVE-2026-123675
A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function executecode of the file imclient/agents/tools/codeexecutor.py of the component Code Executor Tool. This manipulation of the argument filename/lang causes code injection. T...
CVE-2026-111573
Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's...
EUVD-2026-118314
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module...
CVE-2026-123853
JetBrains IntelliJ IDEA versions prior to 2026.3 and 2026.2.2 are vulnerable to code execution while running in Safe Mode . The root cause involves project-controlled JVM options within the build process, which allows for the inclusion of functionality from an untrusted control sphere (CWE-829 )....
CVE-2026-123853
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process...
CVE-2026-123854
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module...
CVE-2026-123854
In JetBrains PyCharm versions prior to 2026.3 , a vulnerability allowed for code execution within Safe Mode . This issue was triggered by processing a crafted Jupyter notebook widget module . The root cause involves the inclusion of functionality from an untrusted control sphere (CWE-829 ). No sp...
EUVD-2026-118356
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process...
CVE-2026-123854
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module...
CVE-2026-123852
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates...
CVE-2026-123852
JetBrains Junie GitHub Action versions prior to 1.8.0 are vulnerable to code execution using workflow credentials. This vulnerability is triggered via fork updates , where an attacker can execute arbitrary code. The issue is categorized under CWE-863 (Incorrect Authorization). While the risk is h...
EUVD-2026-118355
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates...
EUVD-2026-118352
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers...
CVE-2026-123849
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers...
CVE-2026-123849
In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows code execution within untrusted projects. The root cause is located in the Terraform File Watchers component, specifically identified as an inclusion of functionality from an untrusted control sphere (CWE-829...