ransomwatch

RansomWatch RansomWatch is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites, store the data in a SQLite database, and send notifications via Slack or Discord when a new victim shows up, or when a victim is removed. Note: RansomWatch isn't...

EUVD-2026-118403

DDEV is an open-source tool for running local web development environments for PHP and Node.js. From 1.25.2 until 1.25.4, Untar in pkg/archive/archive.go validates an absolute tar symlink target after rebasing it beneath dest, but creates the symlink with the raw absolute Linkname. A crafted...

keepassxc-fzf

keepassxc-fzf Interactive terminal interface for managing KeePass databases using keepassxc-cli and fzf. Features Interactive entry search with fuzzy finder fzf Real-time entry preview password masked Copy to clipboard with auto-clear: Password 10 seconds Username, URL, Notes 30 seconds Keyfile...

Another-Metabase-RCE-CVE-2023-38646

Extension of the Pre-Auth RCE in Metabase CVE-2023-38646 explained here This helped me to avoid errors related to "database already in use" with H2 and postgre as engines "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl": null, "refingerprint":...

CVE-2026-123834

In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account...

CVE-2026-123832

In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database...

CVE-2026-123833

In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects...

CVE-2026-121881

SQL injection vulnerability in the getlastseen code-server session-state RPC in Posit Software, PBC Posit Workbench before 2026.08.0 allows authenticated users to read arbitrary data from the Workbench database via the sessionIds parameter. NOTE: exploitation requires a valid authenticated sessio...

CVE-2026-123834

In JetBrains Datalore versions prior to 2026.4 , an improper scope validation within database tasks allows an attacker to utilize a service account from a different workspace. This authorization bypass (CWE-639) can result in high impacts on confidentiality, integrity, and availability. No specif...

EUVD-2026-118337

In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account...

CVE-2026-123834

In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account...

EUVD-2026-118335

In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database...

CVE-2026-123832

In JetBrains CLion versions prior to 2026.2 , a vulnerability allows for code execution within Safe Mode . The root cause involves the processing of a JSON compilation database . The impact is classified as CRITICAL (CVSS 9.6) with high consequences for confidentiality, integrity, and availabilit...

CVE-2026-123833

In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability allows database connections to be established within untrusted projects . This is categorized under CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The impact involves low levels of confidentiality and integ...

CVE-2026-123832

In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database...

CVE-2026-123833

In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects...

EUVD-2026-118336

In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects...

CVE-2026-123488

Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because the attribute parameter is concatenated into the query unsanitized and emulated PDO prepares allow stacked statements. Remote attackers can read and...

EUVD-2026-118305

SQL injection vulnerability in the getlastseen code-server session-state RPC in Posit Software, PBC Posit Workbench before 2026.08.0 allows authenticated users to read arbitrary data from the Workbench database via the sessionIds parameter. NOTE: exploitation requires a valid authenticated sessio...

EUVD-2026-118291

Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL eager-loading: arguments on eager-loadable nodes absent from the public schema are copied into EagerLoadPlan criteria without cleansing. Unauthenticated attackers can supply a parenthesized...