CVE-2026-123842: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives

In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives...

CVE-2026-123325: JetBrains YouTrack: In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible…

In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page...

CVE-2026-123486: WWBN AVideo: WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows…

WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...

CVE-2026-123844: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories

In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories...

CVE-2026-83497

A flaw was found in the OpenSearch SQL plugin. A remote authenticated user with basic read/search permissions can exploit this vulnerability by sending a specially crafted cursor parameter to the plugins/sql endpoint. This unrestricted deserialization of untrusted data allows the attacker to...

CVE-2026-92131

A flaw was found in the Jenkins Pipeline: Groovy Libraries Plugin. This vulnerability allows attackers who can configure Pipelines to exploit a path traversal issue. The plugin does not properly restrict library paths, enabling it to follow symbolic links outside the intended SCM checkout. This c...

CVE-2026-92129

A flaw was found in Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, such as Pipelines, can bypass the sandbox protection. This is due to the plugin not checking calls from sandboxed scripts to methods added dynamically to a class at runtime...

CVE-2026-92127

A flaw was found in Jenkins Script Security Plugin. The plugin automatically approves classpath entries in an item's configuration when a user with administrative permissions copies the item or updates its configuration through the REST API or command-line interface CLI. This allows attackers who...

CVE-2026-92126

A flaw was found in Jenkins Script Security Plugin. This vulnerability allows attackers with permission to define and run sandboxed scripts, such as Pipelines, to bypass the sandbox protection. The plugin fails to reject @Builder annotations that specify an arbitrary class in their builderStrateg...

CVE-2026-92122

A flaw was found in Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, such as Pipelines, can bypass the sandbox protection. This is achieved by coercing a value to an interface within a sandboxed script, specifically when the value inherits a method...

CVE-2026-119282

A flaw was found in Nx. The project-graph analyzers in the Maven and Gradle plugins interpolate workspace configuration options directly into shell command arguments without adequate sanitization. An attacker who convinces a user to run Nx within a malicious repository or pull request can exploit...

CVE-2026-82960

Improper Control of Generation of Code 'Code Injection' in ModelFormField in the Apache OFBiz cms plugin before 24.09.08 on all platforms allows a remote authenticated attacker holding only CMS content-editor access to execute arbitrary operating system commands as the OFBiz process user via a...

CVE-2026-82960

The Apache OFBiz cms plugin (versions before 24.09.08 ) is vulnerable to Code Injection within the ModelFormField component. A remote authenticated attacker with CMS content-editor access can execute arbitrary operating system commands as the OFBiz process user via a single HTTP POST request . Th...

CVE-2026-82960 Apache OFBiz: Widget use-when Expression Injection Bypasses Groovy Sandbox for authenticated RCE

Improper Control of Generation of Code 'Code Injection' in ModelFormField in the Apache OFBiz cms plugin before 24.09.08 on all platforms allows a remote authenticated attacker holding only CMS content-editor access to execute arbitrary operating system commands as the OFBiz process user via a...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

CVE-2026-107776

The Dokan WordPress plugin before 5.3.3 does not reconcile the amount credited to a vendor's reverse-withdrawal ledger against the amount actually collected for the payment order, allowing a vendor to clear their outstanding commission debt while paying less than the balance owed when a discount...

EUVD-2026-117401

The Dokan WordPress plugin before 5.3.3 does not reconcile the amount credited to a vendor's reverse-withdrawal ledger against the amount actually collected for the payment order, allowing a vendor to clear their outstanding commission debt while paying less than the balance owed when a discount...

CVE-2026-90966

The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing package selected for free activation is genuinely free or that the requesting user is entitled to it, allowing a self-registered customer to activate a paid package without payment...

CVE-2026-90963

The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-status check in one of its AJAX actions, allowing unauthenticated users to read the full contents of property listings that have not been published, together with the private name, email...

CVE-2026-86442

The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied post identifier in its front-end event submission flow, allowing unauthenticated attackers to read and overwrite the content of arbitrary unpublished posts and pages, and to conver...