12 matches found
CVE-2025-43929
CVE-2025-43929 Proof-of-concept for CVE-2025-43929, a high-severity vulnerability in KiTTY allowing for local executables to be ran without user confirmation under certain circumstances Vulnerability Type CWE-346: CWE-346 Origin Validation Error Vulnerability Description openactions.py in kitty...
Astra Linux – Vulnerability in OpenSSH
OpenSSH versions prior to 10.3 omitted the confirmation of connection multiplexing for proxy-mode multiplexing sessions...
CVE-2026-86504
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...
CVE-2026-86504
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...
CVE-2026-86504
JetBrains IntelliJ IDEA versions prior to 2026.2.2 are affected by a vulnerability where a missing project-trust confirmation before building a Dev Container allows host-level code execution . The flaw requires local access and user interaction but no prior privileges, yielding HIGH impact on con...
EUVD-2026-72520
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...
CVE-2026-86504
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...
AZL-81785 CVE-2026-35388 affecting package openssh for versions less than 9.8p1-6
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions...
CVE-2026-35388: Unprotected Alternate Channel
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions...
CVE-2025-68269: Acceptance of Extraneous Untrusted Data With Trusted Data
In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH...
CVE-2025-43929
openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...