CVE-2026-123302

The JetBrains IntelliJ IDEA IDE versions before 2026.3 , 2026.2.4 , 2026.1.5.1 , and 2025.3.6.2 are vulnerable to code execution when handling untrusted projects. The root cause involves script engine discovery , which allows for the inclusion of functionality from an untrusted control sphere (CW...

EUVD-2026-118058

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting...

CVE-2026-123293

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting...

CVE-2026-123293

JetBrains IntelliJ IDEA versions prior to 2026.3 and 2026.2.4 are vulnerable to code execution within untrusted projects. The root cause is linked to the Terraform tool path setting (CWE-829), which allows for the inclusion of functionality from an untrusted control sphere. No specific remediatio...

CVE-2026-123280

In JetBrains Datalore versions prior to 2026.2.4 , an incorrect authorization vulnerability (CWE-863) allows unauthenticated users to execute arbitrary code. The attack vector is triggered through published interactive reports . This vulnerability has a High base severity (CVSS 3.1: 8.1), potenti...

EUVD-2026-118045

In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports...

CVE-2026-123278

In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows for code execution . The root cause is an unauthenticated JDBC worker RMI endpoint , which lacks necessary authentication for critical functionality (CWE-306). This vulnerability allows for High confidentiali...

CVE-2026-123279

In JetBrains Datalore versions prior to 2026.4 , a vulnerability allows for code execution within a notebook's computation. This issue stems from Incorrect Authorization (CWE-863), specifically enabling view-only collaborators to execute code. The vulnerability carries a CRITICAL CVSS 3.1 base sc...

CVE-2026-123278

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint...

EUVD-2026-118043

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint...

EUVD-2026-118044

In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators...

CVE-2026-123276

In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile...

CVE-2026-123276

JetBrains CLion versions before 2026.3 (specifically 2026.2.4.1 ) are vulnerable to code execution when running in Safe Mode . The root cause is the inclusion of functionality from an untrusted control sphere (CWE-829) triggered via a crafted GDB server debug profile . This vulnerability has a Hi...

EUVD-2026-118041

In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile...

ElfDoor-gcc

ElfDoor-gcc ElfDoor-gcc is an LDPRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code. Detailed Article: https://matheuzsecurity.github.io/hacking/gcc/ Install git clone https://github.com/MatheuZSecurity/ElfDoor-gcc cd ElfDoor-gcc chmod ...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

cspparse

cspparse Description cspparse is a tool to evaluate Content Security Policies. It uses Google's API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for headers with Google's API, it also parses the target site's HTML to look for any CSP rules that are...

MalQR.github.io

MalQR About MalQR is a collection of malicious QR codes and barcodes you can use to test the security of your scanners. It gives you the ability to conduct such tests with easiness : you just need to have a smartphone, a tablet or a laptop with an internet connection and browse MalQR.shielder.com...

PageTableInjection

PageTableInjection Code Injection, Inject malicious payload via pagetables pml4. Introduction This is just a proof-of-concept of the page table injection technique to inject malicious code into the arbitrary user processes. On Windowsand some modern OSes, every process has a its PML4 a.k.a...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...