Malicious code in giga-quick-rb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15701 Malicious code in giga-quick-rb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-54073

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

CVE-2026-54073 VeraCrypt: Hidden volume quick format weakens plausible deniability

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

CVE-2026-54073 VeraCrypt: Hidden volume quick format weakens plausible deniability

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

CVE-2026-54073

VeraCrypt versions 1.26.6 through 1.26.29 are affected by a flaw in file-hosted hidden volume creation. The FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at predictable 128 MiB intervals , bypassing the normal Encry...

CVE-2026-54073 VeraCrypt: Hidden volume quick format weakens plausible deniability

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

PT-2026-77141

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.103.0, the iconClass label value is returned raw by getNoteIcon and inserted without HTML attribute encoding into class attributes in apps/client/src/widgets/quic...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

EUVD-2026-60258

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1, the Quick Documentation feature allows local code execution with no privileges required. Attack requires user interaction, rated CVSS 4.4 (MEDIUM). Fix: upgrade to 2026.2.1. No in-the-wild exploitation reported. Reference: https://www.jetbrains.com/privacy-se...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75059: Improper Neutralization of Input During Web Page Generation

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

PT-2026-76708

Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions prior to 2026.2.1 Description An issue exists that allows remote code execution through the Quick Documentation feature. Recommendations Update JetBrains PyCharm to version 2026.2.1...

WordPress Quick PayPal Payments plugin <= 5.7.50 - Unauthenticated Payment Bypass via PayPal IPN vulnerability

Unauthenticated Payment Bypass via PayPal IPN vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Quick Paypal Payments versions = 5.7.50...

DRUPAL-CONTRIB-2026-099

This module enables you to display content in tabs, where each tab renders a block, a node, a view, or another Quick Tabs instance. The module did not correctly enforce access when rendering node and block tabs. It treated a neutral access result as a grant for node tabs and block plugins, and...

CVE-2026-17008

The Quick Paypal Payments WordPress plugin through 5.7.50 does not verify the paid amount, receiver, or payment status in its PayPal IPN handler and marks an order paid on an order-token match alone, so a buyer who pays an arbitrary small amount can have a full-price order marked paid...

CVE-2026-17008

The Quick Paypal Payments WordPress plugin through 5.7.50 does not verify the paid amount, receiver, or payment status in its PayPal IPN handler and marks an order paid on an order-token match alone, so a buyer who pays an arbitrary small amount can have a full-price order marked paid...