Lucene search
+L

11548 matches found

NVD
NVD
•added 2021/03/18 8:15 p.m.•42 views

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

5.3CVSS0.00796EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/03/18 8:15 p.m.•32 views

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

5.3CVSS5.8AI score0.00796EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/18 8:15 p.m.•46 views

Code injection

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

5CVSS5.4AI score0.00796EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/03/18 8:15 p.m.•14 views

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

5.3CVSS5.8AI score0.00796EPSS
SaveExploits0References3
CVE
CVE
•added 2021/03/18 7:20 p.m.•664 views

CVE-2021-25764

PhpStorm (JetBrains) before 2020.3 is affected: the issue lets source code be written into debug logs (“Source code could be added to debug logs”). The vulnerability affects PhpStorm’s logging path and can lead to information disclosure via logs. The issue is tracked as CVE-2021-25764. Remediatio...

5.3CVSS5.4AI score0.00796EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/03/18 7:20 p.m.•45 views

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

6.7AI score0.00796EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/18 12:00 a.m.•12 views

CVE-2021-25764: Undefined Security Weakness

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

5.3CVSS5.7AI score0.00796EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/18 12:00 a.m.•9 views

PT-2021-16776

Name of the Vulnerable Software and Affected Versions JetBrains PhpStorm versions prior to 2020.3 Description The issue allows source code to be added to debug logs. Recommendations For versions prior to 2020.3, update to version 2020.3 or later to resolve the issue...

5.3CVSS0.00796EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/03/18 12:00 a.m.•26 views

JetBrains PhpStorm security vulnerabilities

JetBrains PhpStorm is an application from the Czech JetBrains company. It provides an application for writing code. A security vulnerability exists in JetBrains PhpStorm before 2020.3, which originates from code that can be added to the debug log...

5.3CVSS5.9AI score0.00796EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/03/15 12:00 a.m.•23 views

Eclipse Theia Cross-Site Scripting Vulnerability

Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A cross-site scripting vulnerability exists in Eclipse Theia 1.8.0 and prior versions, which stems from the absence of HTML escaping...

6.1CVSS6AI score0.00708EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2021/03/14 11:30 a.m.•91 views

Girsh - Automatically Spawn A Reverse Shell Fully Interactive

Who didn't get bored of manually typing the few lines to upgrade a reverse shell to a full interactive reverse shell tty spawn, stty size ..., stty raw -echo or typing the command to use ConPTY. Description With Girsh, just run it and it will detect the OS and execute the correct commands to...

7.8AI score
SaveExploits0References2
osv_cve
osv_cve
•added 2021/03/12 10:15 p.m.•17 views

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

6.1CVSS6.9AI score
SaveExploits0References1
NVD
NVD
•added 2021/03/12 10:15 p.m.•43 views

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

6.1CVSS0.00708EPSS
SaveExploits1References1
Prion
Prion
•added 2021/03/12 10:15 p.m.•27 views

Code injection

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

4.3CVSS6.3AI score0.00708EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/03/12 10:15 p.m.•12 views

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

6.1CVSS6.4AI score0.00708EPSS
SaveExploits1References2
Mend
Mend
•added 2021/03/12 9:40 p.m.•9 views

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

6.1CVSS0.00708EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/03/12 9:40 p.m.•55 views

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

6.5AI score0.00708EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/03/12 12:00 a.m.•25 views

Eclipse Theia cross-site scripting vulnerabilities

Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A cross-site scripting vulnerability exists in Eclipse Theia 1.8.0 and prior versions, which stems from the absence of HTML escaping...

6.1CVSS5.3AI score0.00708EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/12 12:00 a.m.•6 views

CVE-2021-28161: Improper Neutralization of Input During Web Page Generation

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

6.1CVSS5.7AI score0.00708EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/03/12 12:00 a.m.•3 views

PT-2021-17783

Name of the Vulnerable Software and Affected Versions: Eclipse Theia versions up to and including 1.8.0 Description: The issue concerns the lack of HTML escaping in the debug console, allowing arbitrary Javascript code to be injected. Recommendations: For Eclipse Theia versions up to and includin...

6.1CVSS0.00708EPSS
SaveExploits1References5
Rows per page
Query Builder