CVE-2026-123325

JetBrains YouTrack versions before 2025.3.170763 , 2026.1.14150 , and 2026.2.19656 are vulnerable to an inclusion of untrusted remote code vulnerability. This issue occurs via the plugin sandbox page , where the inclusion of functionality from an untrusted control sphere (CWE-829) is possible. Th...

CVE-2026-123322

In JetBrains WebStorm versions prior to 2026.3 and 2026.2.4 , a vulnerability exists that allows for code execution within untrusted projects. The root cause is linked to the Angular CLI schematics loader (associated with CWE-829: Inclusion of Functionality from Untrusted Control Sphere ). The im...

CVE-2026-123321

The JetBrains WebStorm IDE (versions prior to 2026.3 and 2026.2.3 ) is vulnerable to code execution when loading Grunt and Gulp tasks from untrusted projects . This vulnerability is caused by the inclusion of functionality from an untrusted control sphere (CWE-829 ). An attacker could potentially...

CVE-2026-123308

In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows for code execution when importing a document from an untrusted project . This issue is categorized under CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The impact includes high consequenc...

CVE-2026-123304

JetBrains IntelliJ IDEA versions before 2026.3 are vulnerable to code execution in untrusted projects. The root cause is associated with a configured ShellCheck path , allowing for the inclusion of functionality from an untrusted control sphere (CWE-829). Exploitation of this vulnerability requir...

CVE-2026-123302

The JetBrains IntelliJ IDEA IDE versions before 2026.3 , 2026.2.4 , 2026.1.5.1 , and 2025.3.6.2 are vulnerable to code execution when handling untrusted projects. The root cause involves script engine discovery , which allows for the inclusion of functionality from an untrusted control sphere (CW...

CVE-2026-123293

JetBrains IntelliJ IDEA versions prior to 2026.3 and 2026.2.4 are vulnerable to code execution within untrusted projects. The root cause is linked to the Terraform tool path setting (CWE-829), which allows for the inclusion of functionality from an untrusted control sphere. No specific remediatio...

CVE-2026-123280

In JetBrains Datalore versions prior to 2026.2.4 , an incorrect authorization vulnerability (CWE-863) allows unauthenticated users to execute arbitrary code. The attack vector is triggered through published interactive reports . This vulnerability has a High base severity (CVSS 3.1: 8.1), potenti...

CVE-2026-123278

In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows for code execution . The root cause is an unauthenticated JDBC worker RMI endpoint , which lacks necessary authentication for critical functionality (CWE-306). This vulnerability allows for High confidentiali...

CVE-2026-123279

In JetBrains Datalore versions prior to 2026.4 , a vulnerability allows for code execution within a notebook's computation. This issue stems from Incorrect Authorization (CWE-863), specifically enabling view-only collaborators to execute code. The vulnerability carries a CRITICAL CVSS 3.1 base sc...

CVE-2026-123276

JetBrains CLion versions before 2026.3 (specifically 2026.2.4.1 ) are vulnerable to code execution when running in Safe Mode . The root cause is the inclusion of functionality from an untrusted control sphere (CWE-829) triggered via a crafted GDB server debug profile . This vulnerability has a Hi...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

ElfDoor-gcc

ElfDoor-gcc ElfDoor-gcc is an LDPRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code. Detailed Article: https://matheuzsecurity.github.io/hacking/gcc/ Install git clone https://github.com/MatheuZSecurity/ElfDoor-gcc cd ElfDoor-gcc chmod ...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

cspparse

cspparse Description cspparse is a tool to evaluate Content Security Policies. It uses Google's API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for headers with Google's API, it also parses the target site's HTML to look for any CSP rules that are...

MalQR.github.io

MalQR About MalQR is a collection of malicious QR codes and barcodes you can use to test the security of your scanners. It gives you the ability to conduct such tests with easiness : you just need to have a smartphone, a tablet or a laptop with an internet connection and browse MalQR.shielder.com...

PageTableInjection

PageTableInjection Code Injection, Inject malicious payload via pagetables pml4. Introduction This is just a proof-of-concept of the page table injection technique to inject malicious code into the arbitrary user processes. On Windowsand some modern OSes, every process has a its PML4 a.k.a...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

PulseAPK

PulseAPK 🌍 Languages English | Deutsch | Español | Français | עברית | 한국어 | Беларуская | Suomi | Latviešu | Eesti | Lietuvių | Čeština | Slovenčina | Magyar | العربية | Português | Русский | Українська | 中文 💡 Looking for a cross-platform alternative? Download PulseAPK Core here:...