fernflower

Fernflower Fernflower 是第一个真正可用的 Java 分析反编译器，可能也是第一个用于高级编程语言的分析反编译器。 发布版本发布在 IntelliJ 社区仓库。 请将错误报告和功能请求发送到问题跟踪器（子系统 Java. Decompiler. Engine）。 IntelliJ 使用 Fernflower 作为 IntelliJ IDEA 的一部分打包，主要用于在调试或浏览类文件时显示 Java 代码。 命令行使用 Fernflower 可以通过以下命令以独立模式从命令行运行： root@kitploit: java -jar fernflower.jar -= +...

Decompiler_Tools

DecompilerTools 0x01 默认的 IDEA 反编译器 Mac OS 目录 /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib root@kitploit: /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib -rw-r--r--@ 1 xxx xxx 1.4M 4 8 22:19 java-decompiler.jar java-decompiler.jar: Java archive data JAR...

JetBrains IntelliJ IDEA < 2026.2.2 Information Disclosure (CVE-2026-86501)

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.2.2. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log. CVE-2026-86501 Note that Nessus has no...

CVE-2020-35667-PoC

CVE-2020-35667-PoC 概述 免责声明 下面说明的脆弱行为是通过对反编译后的补丁版工件进行经验性验证得出的，该行为试图通过启发式方法模拟原始漏洞，因为原始的漏洞插件版本已不再可用。本仓库包含一个压缩包，其中包含一个经过最小修改的构建（源自补丁版本），用于隔离的实验室复现。 此 CVE 涉及 IntelliJ IDEA TeamCity 集成插件，该插件实现 IDE 与 TeamCity 的集成。TeamCity 是一个 CI/CD 编排器和归档系统，存储构建配置和其他工件，并通过 REST/RPC API 暴露。 该插件在本地打开几个 HTTP...

CVE-2026-86505

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...

CVE-2026-86503

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

CVE-2026-86501

In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...

CVE-2026-86504

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

EUVD-2026-72520

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...

EUVD-2026-72519

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

CVE-2026-86503

JetBrains IntelliJ IDEA versions before 2026.2.2 are vulnerable to Server-Side Request Forgery (SSRF) when opening an untrusted project. The flaw is triggered through Kubernetes spec-source URL fetching , allowing a crafted project to cause the IDE to issue requests to attacker-controlled URLs. T...

CVE-2026-86505

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...

CVE-2026-86503

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

CVE-2026-86504

JetBrains IntelliJ IDEA versions prior to 2026.2.2 are affected by a vulnerability where a missing project-trust confirmation before building a Dev Container allows host-level code execution . The flaw requires local access and user interaction but no prior privileges, yielding HIGH impact on con...

CVE-2026-86504

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...

CVE-2026-86503

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

EUVD-2026-72521

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...

CVE-2026-86504

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...

CVE-2026-86505

JetBrains IntelliJ IDEA prior to 2026.2.2 contains a missing project-trust check that allowed project metadata to be leaked to the JetBrains Marketplace . The vulnerability requires a local attack vector with user interaction, resulting in a low confidentiality impact (CVSS 3.1 score: 3.3 LOW ). ...