490206 matches found
MINI-3P8H-RX5M-X72X
Bulletin has no description...
MINI-28JG-QQ96-6RJW
Bulletin has no description...
MINI-9VQX-4VF6-C6VP
Bulletin has no description...
MINI-7X7X-P7GV-PV2W
Bulletin has no description...
CVE-2026-74254
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...
CVE-2026-31367
creationtimestamp| type| source ---|---|--- 2026-08-17 18:00:04+00:00| seen| Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s 2026-08-18 00:00:12+00:00| published-proof-of-concept| Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s 2026-08-22 19:00:07+00:00| seen|...
CVE-2026-33437 Stirling PDF: Stored XSS in Info Summary
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
CVE-2026-33437
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
CVE-2026-33437 Stirling PDF: Stored XSS in Info Summary
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
CVE-2026-48053
Kolibri versions before 0.19.4 have an unauthenticated SSRF in RemoteFacilityUserViewset (api.py:1570) and three other endpoints: the baseurl parameter is only scheme-validated, and requests follows 30x redirects, allowing attackers to pivot fetches to internal services or cloud metadata (AWS IMD...
CVE-2026-48053 Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewset
Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated baseurl parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body back to the caller. The original report identified two endpoints ...
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75056
JetBrains IntelliJ IDEA before 2026.2.1 is vulnerable to remote code execution via the Markdown export tool; a malicious Markdown document can trigger code execution during export. CVSS 7.8 (HIGH) — local attack vector, low complexity, no privileges required, user interaction needed. Upgrade to 2...
CVE-2026-53960 Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LD
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, hidden or otherwise unviewable first-post content was leaked as an excerpt in the publicly-served Q&A QAPage JSON-LD structured data, exposing it to any unauthenticated visitor and to search-engi...
CERTFR-2026-ACT-035
creationtimestamp| type| source ---|---|--- 2026-08-17 14:55:00+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mtbxhffsrh2j 2026-08-17 14:55:02+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117111422915196346...
MINI-G5J6-JJXJ-23QG
Bulletin has no description...
MINI-8XH7-CQ46-FFRJ
Bulletin has no description...