fernflower

Fernflower Fernflower is the first actually working analytical decompiler for Java and probably for a high-level programming language in general. Releases are published in the Intellij Community repository. Please send your bug reports and feature requests to the issue tracker in subsystem Java...

Decompiler_Tools

DecompilerTools 0x01 default idea decompiler Mac OS Dir /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib root@kitploit: /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib -rw-r--r--@ 1 xxx xxx 1.4M 4 8 22:19 java-decompiler.jar java-decompiler.jar: Java archi...

CVE-2020-35667-PoC

CVE-2020-35667-PoC Overview DISCLAIMER The vulnerable behaviour illustrated below was verified empirically from decompiled, patched artifacts, which tries to resemble the original vulnerability inferred with an heuristic approach, since the original vulnerable plugin release is no longer availabl...

JetBrains IntelliJ IDEA < 2026.2.1 Multiple Vulnerabilities

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains IntelliJ IDEA before 2026.2.1 RCE via Markdown export tool was possible. CVE-2026-75056 - In JetBrains IntelliJ IDEA before 2026.2.1 SSR...

JetBrains IntelliJ IDEA < 2026.1.5 Git Credential Disclosure

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.5. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains IntelliJ IDEA before 2026.1.5 Git credentials were written in plaintext to the IDE log. CVE-2026-75057 Note that Nessus h...

CVE-2026-75054

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects...

CVE-2026-75056

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...

CVE-2026-75057

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75052

In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...

CVE-2026-75053

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...

CVE-2026-75058

In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...

EUVD-2026-60257

In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...

CVE-2026-75058

XML External Entity (XXE) injection in IntelliJ IDEA's Eclipse settings importers affects versions before 2026.2.1. CVSS 5.5 (MEDIUM) — local attack, no privileges, high confidentiality impact. Remediation: upgrade to IntelliJ IDEA 2026.2.1 or later. No in-the-wild exploitation reported. Details:...

CVE-2026-75058

In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...

EUVD-2026-60256

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

CVE-2026-75057

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

CVE-2026-75057

In IntelliJ IDEA before 2026.1.5, Git credentials were written in plaintext to the IDE log, exposing them to any local user with log read access. CVSS 6.2 (MEDIUM) reflects high confidentiality impact. Exploitation details are not provided; upgrade to 2026.1.5 to remediate.

CVE-2026-75058

In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...

CVE-2026-75057

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...