1331896 matches found
dumpulator
dumpulator Note: This is a work-in-progress prototype, please treat it as such. Pull requests are welcome! You can get your feet wet withgood first issues An easy-to-use library for emulating code in minidump files. Here are some links to posts/videos using dumpulator: Introduction video with...
CVE-2025-49844
🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...
TokenTactics
TokenTactics Azure JSON Web Token "JWT" Manipulation Toolset Azure access tokens allow you to authenticate to certain endpoints as a user who signs in with a device code. Even if they used multi-factor authentication. Once you have a user's access token, it may be possible to access certain apps...
CVE-2026-123325
JetBrains YouTrack versions before 2025.3.170763 , 2026.1.14150 , and 2026.2.19656 are vulnerable to an inclusion of untrusted remote code vulnerability. This issue occurs via the plugin sandbox page , where the inclusion of functionality from an untrusted control sphere (CWE-829) is possible. Th...
EUVD-2026-118089
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page...
CVE-2026-123325
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page...
EUVD-2026-118086
In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader...
CVE-2026-123322
In JetBrains WebStorm versions prior to 2026.3 and 2026.2.4 , a vulnerability exists that allows for code execution within untrusted projects. The root cause is linked to the Angular CLI schematics loader (associated with CWE-829: Inclusion of Functionality from Untrusted Control Sphere ). The im...
EUVD-2026-118085
In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects...
CVE-2026-123321
The JetBrains WebStorm IDE (versions prior to 2026.3 and 2026.2.3 ) is vulnerable to code execution when loading Grunt and Gulp tasks from untrusted projects . This vulnerability is caused by the inclusion of functionality from an untrusted control sphere (CWE-829 ). An attacker could potentially...
CVE-2026-123321
In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects...
CVE-2026-123322
In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader...
EUVD-2026-118072
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects...
CVE-2026-123308
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects...
CVE-2026-123308
In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows for code execution when importing a document from an untrusted project . This issue is categorized under CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The impact includes high consequenc...
CVE-2026-123304
JetBrains IntelliJ IDEA versions before 2026.3 are vulnerable to code execution in untrusted projects. The root cause is associated with a configured ShellCheck path , allowing for the inclusion of functionality from an untrusted control sphere (CWE-829). Exploitation of this vulnerability requir...
EUVD-2026-118068
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path...
CVE-2026-123304
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path...