CVE-2026-123854

In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module...

CVE-2026-123852

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates...

CVE-2026-123849

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers...

CVE-2026-123841

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive...

CVE-2026-123838

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file...

CVE-2026-123832

In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database...

CVE-2026-123831

In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings...

CVE-2026-123835

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition...

CVE-2026-104657

Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which allows an attacker to compromise or influence a release component and execute attacker-controlled code when a user runs the skill. On macOS, the skill stages the package at ...

CVE-2026-118762

A flaw was found in Monkeytype. Its continuous integration CI workflow improperly executes untrusted code from external pull requests with elevated write permissions. A remote attacker can submit a pull request containing malicious code that executes within the build environment, allowing them to...

CVE-2026-121953

A flaw was found in FreeRDP. A use-after-free vulnerability exists in the client's Remote Desktop Protocol Graphics RDPGFX dynamic virtual channel handling. A malicious RDP server can open a second dynamic virtual channel that reuses an already registered channel name with a different ChannelId,...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

dontgo403

dontgo403 is a tool to bypass 40X errors. Installation Grab the latest release for your OS from RELEASES Outdated atm Or compile by your own RECOMMENDED: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build Customization If you want to edit or add new bypasses, you can...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

ci_fuzz

Description: This script fuzz's for Command Injection vulnerabilities resulting in remote command execution. Similiar OWASP vulnerablities are explained here -- https://www.owasp.org/index.php/CommandInjection The script will attempt to execute OS commands by injecting into every value in the bod...

CVE-2021-24155.rb

WordPress-Backup-RCE This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension whi...

APKHunt

APKHunt | OWASP MASVS Static Analyzer APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential...

SharpCovertTube

SharpCovertTube SharpCovertTube is a program created to control Windows systems remotely by uploading videos to Youtube. The program monitors a Youtube channel until a video is uploaded, decodes the QR code from the thumbnail of the uploaded video and executes a command. The QR codes in the video...

CodeAnalysis

TCA, Tencent Cloud Code Analysis code-named: CodeDog English | 简体中文 TCA Official Official website: https://tca.tencent.com Official introduction: https://cloud.tencent.com/product/tcap TCA CNB PagesBetter Internet Speed Domestic: https://cnb.cool/tencent/cloud/tca/code-analysis Domestic:...

CVE-2024-21633

MobSF Remote code execution via CVE-2024-21633 I have found an arbitrary file write in apktool and reported via github security advisory. I was aware that many projects were relied upon or dependent to apktool but after the publish of advisory and fix not many seem to be noticed or cared about it...