PyCharm Community, Professional: Remote code execution

Background PyCharm is the Python IDE for professional developers. Description Insufficient validation exists within PyCharm’s checks for fetching projects from VCS. Impact If a victim can be enticed into fetching a VCS project via PyCharm, a remote attacker could achieve remote code execution...

JetBrains PyCharm Local Code Execution Vulnerability

PyCharm is the Python integrated development environment from Czech software development company JetBrains. A local code execution vulnerability exists in PyCharm versions prior to 2020.3.4. The vulnerability stems from insufficient checks when the VCS fetches a project and can be exploited by an...

CVE-2021-30005

In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS...

CVE-2021-30005

In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS...

CVE-2021-30005

In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS...

Design/Logic Flaw

In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS...

CVE-2021-30005

In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS...

CVE-2021-30005

CVE-2021-30005 affects JetBrains PyCharm prior to 2020.3.4. The issue stems from PyCharm's initial project handling where, on first open, PyCharm would auto-activate a virtual environment found in the project, enabling an attacker to place a malicious venv in a VCS repository. A PoC demonstrates ...

CVE-2021-30005: Insufficient Verification of Data Authenticity

In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS...

PT-2021-18567

Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions prior to 2020.3.4 Description The issue allows for local code execution due to insufficient checks when getting the project from VCS. Recommendations For versions prior to 2020.3.4, update to version 2020.3.4 or late...

Jetbrains JetBrains PyCharm data manipulation vulnerability

PyCharm is the Python integrated development environment from Czech software development company JetBrains. A local code execution vulnerability exists in PyCharm versions prior to 2020.3.4. The vulnerability stems from insufficient checks when the VCS fetches a project and can be exploited by an...

Sarenka - OSINT Tool - Data From Services Like Shodan, Censys Etc. In One Place

SARENKA is an Open Source Intelligence OSINT tool which helps you obtaining and understanding Attack Surface. The main goal is to gathering infromation from search engines for Internet-connected devices https://censys.io/ , https://www.shodan.io/. It scraps data about Common Vulnerabilities and...

JetBrains Security Bulletin Q1 2020

FYI News Security JetBrains Security Bulletin Q1 2020 Robert Demmer In the first quarter of 2020, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...

JetBrains PyCharm Information Disclosure Vulnerability

JetBrains PyCharm is an integrated development environment IDE for the Python language from the Czech company JetBrains. An information disclosure vulnerability exists in JetBrains PyCharm version 2019.2.5 and version 2019.3 Windows. The vulnerability stems from errors such as configuration durin...

CVE-2020-11694

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3...

CVE-2020-11694

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3...

Code injection

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3...

CVE-2020-11694

In PyCharm for Windows, versions 2019.2.5 and 2019.3 contained Apple Notarization Service credentials within the distributive. The issue is documented as resolved in 2019.2.6 and 2019.3.3. The concrete detail from connected sources specifies the affected product and versions, and the root cause i...

CVE-2020-11694

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3...

PT-2020-12782

Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions 2019.2.5 through 2019.2.5 JetBrains PyCharm versions 2019.3 through 2019.3 Description The issue concerns the inclusion of Apple Notarization Service credentials in certain versions of JetBrains PyCharm on Windows...