490149 matches found
CVE-2026-48053
Kolibri versions before 0.19.4 have an unauthenticated SSRF in RemoteFacilityUserViewset (api.py:1570) and three other endpoints: the baseurl parameter is only scheme-validated, and requests follows 30x redirects, allowing attackers to pivot fetches to internal services or cloud metadata (AWS IMD...
CVE-2026-48053 Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewset
Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated baseurl parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body back to the caller. The original report identified two endpoints ...
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75056
JetBrains IntelliJ IDEA before 2026.2.1 is vulnerable to remote code execution via the Markdown export tool; a malicious Markdown document can trigger code execution during export. CVSS 7.8 (HIGH) — local attack vector, low complexity, no privileges required, user interaction needed. Upgrade to 2...
CVE-2026-53960 Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LD
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, hidden or otherwise unviewable first-post content was leaked as an excerpt in the publicly-served Q&A QAPage JSON-LD structured data, exposing it to any unauthenticated visitor and to search-engi...
CERTFR-2026-ACT-035
creationtimestamp| type| source ---|---|--- 2026-08-17 14:55:00+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mtbxhffsrh2j 2026-08-17 14:55:02+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117111422915196346...
MINI-8XH7-CQ46-FFRJ
Bulletin has no description...
MINI-G5J6-JJXJ-23QG
Bulletin has no description...
MINI-6VP8-MH4F-7XQ9
Bulletin has no description...
MINI-4FFC-PV2X-G36V
Bulletin has no description...
MINI-HXH4-7GP7-RCJ6
Bulletin has no description...
MINI-G4F6-WJPR-9GWP
Bulletin has no description...
MINI-VFJM-HWR6-MVVH
Bulletin has no description...
MINI-C5HQ-RVJ7-8C8W
Bulletin has no description...
MINI-9RJ3-XXV8-J9FG
Bulletin has no description...
MINI-GG4V-CRFX-22QM
Bulletin has no description...
MINI-58XF-R6HG-VPC2
Bulletin has no description...