CVE-2021-30005-POC

CVE-2021-30005-POC CVE-2021-30005에 대한 PoC. 세부 사항 취약점은 PyCharm이 프로젝트를 처음 열 때 해당 프로젝트에서 발견된 가상 환경을 자동으로 활성화한다는 사실에 있습니다. 이를 통해 공격자는 악성 가상 환경예: venv/bin/activate의 활성화 스크립트에 임의 명령이 포함된 저장소를 생성할 수 있으며, 해당 명령은 사용자가 PyCharm에서 리포지토리를 다운로드하여 열 때 실행됩니다. 주입된 명령은 여기에서 확인할 수 있습니다. 재현 방법 리포지토리 클론: root@kitploi...

zafrida-ui

Chinesisch | English ZAFrida UI - PyCharm Frida Plugin Aktuelle Version: 0.3.6 Projektvorstellung Speziell für PyCharm/IntelliJ entwickeltes grafisches Frida-Tool ZAFrida UI ist ein in PyCharm und JetBrains-IDE integriertes grafisches Frida-Plugin. Es löst die Probleme der umständlichen...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75060

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1, the Quick Documentation feature allows local code execution with no privileges required. Attack requires user interaction, rated CVSS 4.4 (MEDIUM). Fix: upgrade to 2026.2.1. No in-the-wild exploitation reported. Reference: https://www.jetbrains.com/privacy-se...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75060

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...

CVE-2026-75060

JetBrains PyCharm versions prior to 2026.2.1 are vulnerable to unauthenticated remote code execution through Jupyter MCP (Model Context Protocol) tools. MCP is a standard that allows AI models to access data and tools from external sources; in this case, the Jupyter MCP tools in PyCharm could be ...

EUVD-2026-60259

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...

CVE-2026-75060

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...

EUVD-2026-60258

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75060

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...

PT-2026-76708

Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions prior to 2026.2.1 Description An issue exists that allows remote code execution through the Quick Documentation feature. Recommendations Update JetBrains PyCharm to version 2026.2.1...

PT-2026-76709

Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions prior to 2026.2.1 Description Unauthenticated remote code execution is possible through the use of Jupyter MCP tools. MCP Model Context Protocol is a standard that allows AI models to access data and tools from...

JetBrains PyCharm < 2026.1.4 / 2026.2 Arbitrary Code Execution

According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2026.1.4. It is, therefore, affected by an arbitrary code execution vulnerability. In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was...

CVE-2026-65908

In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open...

CVE-2026-65908

In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open...

CVE-2026-65908

JetBrains PyCharm is affected by CVE-2026-65908. In PyCharm before 2026.1.4 (and 2026.2), an attacker could achieve arbitrary code execution by opening a malicious Python executable in an untrusted project. Root cause is likely processing of Python executables on project open; CVSSv3.1 indicates ...