CVE-2025-57728

In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files...

CVE-2025-57728

In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files...

CVE-2025-57728

In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files...

CVE-2025-57728

In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files...

CVE-2025-57728

CVE-2025-57728 affects JetBrains IntelliJ IDEA prior to 2025.2. The vulnerability is due to improper access control that allows a Code With Me guest to discover hidden files. Documented in multiple feeds (Red Hat, CNVD, NVD, OSV, etc.), with no public exploit details provided in the sources. Reme...

JetBrains IntelliJ IDEA 安全漏洞

JetBrains IntelliJ IDEA is an integrated development environment IDE developed by JetBrains , designed to improve developer productivity and code quality , mainly for Java programming , but also supports Kotlin, Web, Spring and other languages and frameworks . JetBrains IntelliJ IDEA suffers from...

PT-2025-34029 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2025.2 Description: Improper access control in JetBrains IntelliJ IDEA allowed a Code With Me guest to discover hidden files. Recommendations: Update JetBrains IntelliJ IDEA to version 2025.2 or later...

Linux Distros Unpatched Vulnerability : CVE-2018-15727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid remember me cookie knowing onl...

MAL-2025-8074 Malicious code in @ibm-ptc/greet-me (npm)

The package @ibm-ptc/greet-me was found to contain malicious code...

MAL-2025-22822 Malicious code in hw-me (npm)

The package hw-me was found to contain malicious code...

MAL-2025-18711 Malicious code in down-load-available-zip-now-8393-wait-for-me-jdvqg-evxzsz (npm)

The package down-load-available-zip-now-8393-wait-for-me-jdvqg-evxzsz was found to contain malicious code...

Malicious code in @ibm-ptc/greet-me (npm)

The package @ibm-ptc/greet-me was found to contain malicious code...

Malicious code in hw-me (npm)

The package hw-me was found to contain malicious code...

Malicious code in @zalastax/nolb-_react-me (npm)

The package @zalastax/nolb-react-me was found to contain malicious code...

Malicious code in down-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfr (npm)

The package down-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfr was found to contain malicious code...

CVE-2025-8708

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...

CVE-2025-8708 Antabot White-Jotter com.gm.wj.config.ShiroConfiguration ShiroConfiguration.java CookieRememberMeManager deserialization

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...

CVE-2025-8708 Antabot White-Jotter com.gm.wj.config.ShiroConfiguration ShiroConfiguration.java CookieRememberMeManager deserialization

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...

WordPress LMS theme <= 9.2 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Cút lộn xào me in WordPress Theme LMS versions = 9.2...

CVE-2025-6086 CSV Me <= 2.0 - Authenticated (Administrator+) Arbitrary File Upload

The CSV Me plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'csvmeoptionspage' function in all versions up to, and including, 2.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload...