Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-30005-POC | Kitploit
Tools/GitHubGitHub/atorralba/cve-2021-30005-poc
Vulnerability AnalysisCode AnalysisExploitationSupply Chain SecurityLearning & Education
GitHubatorralba/cve-2021-30005-poc

CVE-2021-30005-POC

View Repository
215 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-30005-POC

PoC for CVE-2021-30005.

Details

The vulnerability resides in the fact that PyCharm would automatically activate a virtual environment found in the project when opened for the first time. This allowed an attacker to create a repository containing a malicious virtual environment with arbitrary commands in the activation scripts (e.g. venv/bin/activate), that would get executed when downloaded and opened in PyCharm.

The injected command can be found here.

To reproduce

Clone the repo:

root@kitploit:~
git clone https://github.com/atorralba/CVE-2021-30005-POC

And open it in a vulnerable version of PyCharm (before 2020.3.4).

More information about the fix

See Trusted Projects in https://blog.jetbrains.com/pycharm/2021/03/pycharm-2020-3-4-is-out/

References

  • Inspired by: https://blog.doyensec.com/2020/03/16/vscode_codeexec.html
  • JetBrains security bulletin: https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
Download Tool