14 matches found
pentest_teamcity
Metasploit を使用した TeamCity のペネトレーションテスト 要約:JetBrains IDE IntelliJ や PyCharm など からパスワードを取得し、その認証情報を TeamCity Continuous Integration Server 内で使用して、Metasploit を使用してサーバーおよびビルドエージェント上でメータープリターセッションを取得します。Kacper Szurek 著。 JetBrains コメント 以下はベンダー JetBrains TeamCity チーム からのコメントです。Yegor Yarko 氏によるもの:...
From Detection to Remediation: Wiz in Your JetBrains IDE
The Wiz JetBrains IDE plugin is now generally available, enabling developers to fix risks before code leaves their local environment...
KLA90816 ACE vulnerability in Microsoft Copilot Plugin
A remote code execution vulnerability was found in Microsoft Copilot Studio. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-64671 Exploitation Related products GitHub-Copilot-Plugin CVE list CVE-2025-64671 critical KB list Solution Install...
EUVD-2025-26122
Malicious code in bioql PyPI...
CVE-2025-58334
In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves...
CVE-2025-58334
In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves...
CVE-2025-58334
The CVE-2025-58334 vulnerability affects JetBrains IDE Services prior to 2025.5.0.1086 and 2025.4.2.2164, where users without proper permissions could assign themselves a high-privilege role. This stems from an improper privilege assignment mechanism discussed across multiple sources. Impact focu...
CVE-2025-58334
In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves...
JetBrains IDE Services 安全漏洞
JetBrains IDE Services is a software from the Czech company JetBrains for managing JetBrains' development tools and AI features. A security vulnerability exists in JetBrains IDE Services versions prior to 2025.5.0.1086 and prior to 2025.4.2.2164, which stems from an improper assignment of...
CVE-2025-58334: Missing Authorization
In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves...
CVE-2025-52882: Missing Origin Validation in WebSockets
Claude Code is an agentic coding tool. Claude Code extensions in VSCode and forks e.g., Cursor, Windsurf, and VSCodium and JetBrains IDEs e.g., IntelliJ, Pycharm, and Android Studio are vulnerable to unauthorized websocket connections from an attacker when visiting attacker-controlled webpages...
CVE-2022-48430
In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview...