The vulnerability of the display_relocations function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the displayrelocations function in the GNU Binutils development environment is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

CVE-2026-30309

InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective. The predefined blocklist fails to cover native high-risk commands in Windows PowerShell such as powershell, and the matching algorithm...

Faraday 5.19.0

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...

The vulnerability in the software development environment of Totally Integrated Automation Portal (Portal TIA) and the software for simulating and testing the operation of Siemens S7 controllers arises from incorrect restrictions on XML references to external objects. This allows attackers to access arbitrary files.

The vulnerability of the software development environment of Totally Integrated Automation Portal Portal TIA and the software for simulating and testing the operation of Siemens S7 controllers is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerabilit...

EUVD-2025-204309

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...

EDK2 安全漏洞

EDK2 is a set of cross-platform firmware development environments from the Tianocore community based on the UEFI and PI specifications. A security vulnerability exists in EDK2 that stems from a memory corruption when loading invalid firmware in the bootloader...

CVE-2025-64757 Astro Development Server is Vulnerable to Arbitrary Local File Read

Astro is a web framework. Prior to version 5.14.3, a vulnerability has been identified in the Astro framework's development server that allows arbitrary local file read access through the image optimization endpoint. The vulnerability affects Astro development environments and allows remote...

AVEVA Application Server 安全漏洞

AVEVA Application Server is an industrial automation real-time control platform from AVEVA UK. A security vulnerability exists in AVEVA Application Server that stems from a cross-site script injection issue in the IDE component that could lead to elevation of privilege...

CVE-2025-8386 AVEVA Application Server IDE Basic Cross-site Scripting

The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...

CVE-2025-8386

CVE-2025-8386 relates to AVEVA Application Server IDE: an authenticated user with the privileges of “aaConfigTools” can tamper App Objects’ help files to inject persistent cross-site scripting (XSS). This is described as exploitable only during config-time operations in the IDE component; run-tim...

EUVD-2025-179300

Malicious code in development-warp-geoarchaeology-odin npm...

[SECURITY] Fedora 42 Update: qt-creator-16.0.2-3.fc42

Qt Creator is a cross-platform IDE integrated development environment tailored to the needs of Qt developers...

The vulnerability of the DIAScreen development environment for industrial equipment lies in the ability to write beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the DIAScreen development environment for industrial equipment is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the DIAScreen development environment for industrial equipment lies in the ability to write beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the DIAScreen development environment for industrial equipment is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the DIAScreen development environment for industrial equipment lies in the ability to write beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the DIAScreen development environment for industrial equipment is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of IDE services, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of IDE services is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

EUVD-2021-15449

Malware in sbrugna...

EUVD-2005-3068

Malware in sbrugna...

EUVD-2020-30518

Malware in sbrugna...

The vulnerability of IDE CoreML in the integrated development environment of Xcode for operating systems on MacOS allows attackers to bypass the sandbox protection mechanism.

The IDE CoreML component in the Xcode integrated development environment for operating systems on MacOS has a vulnerability related to access control. Exploiting this vulnerability could allow an attacker to bypass the sandbox protection mechanisms...