12 matches found
CVE-2026-64807: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration...
CVE-2026-64811: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration...
CVE-2026-53915: External Control of File Name or Path
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration...
Exploit for CVE-2026-42945
NGINX Rift Configuration Scanner Language: Chinese | English...
CVE-2025-70828: Improper Neutralization of Special Elements used in an OS Command
An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration...
CVE-2025-56332: Initialization of a Resource with an Insecure Default
Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration...
CVE-2025-68162: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration...
CVE-2025-54533: Incorrect Authorization
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration...
CVE-2024-31137: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration...
CVE-2023-51655: Acceptance of Extraneous Untrusted Data With Trusted Data
In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...
CVE-2023-43566: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration...
CVE-2023-41248: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...