44 matches found
pickle_exploit
PickleExploit ClearML에서 Pickle 직렬화를 통한 원격 코드 실행 취약점 시연 🖥️ 이 스크립트는 h3x0v3rl0rd 에 의해 개발되었습니다. 이 개념 증명PoC은 pickle 라이브러리를 사용한 Python 객체의 직렬화 및 역직렬화와 관련된 잠재적인 보안 취약점을 시연합니다. 구체적으로, 역직렬화될 때 os.system을 통해 리버스 셸 명령을 실행하는 reduce 메서드를 가진 RunCommand 클래스를 생성합니다. 이 명령은 지정된 IP 주소와 포트에 리버스 셸 연결을 설정하려고 시도합니다. PoC...
ClearML-CVE-2024-24590
/ | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe ClearML Pickle 아티팩트 업로드 PoC 이 프로젝트는 명령줄 인수를 통해 구성 가능한 매개변수로 ClearML에 pickle 아티팩트를 동적으로 업로드하는 방법을 보여줍니다. 이 스크립트는...
CVE-2024-24590-ClearML-RCE-CMD-POC
ClearML 익스플로잇 스크립트 이 저장소에는 CVE-2024-24590에 대한 Python 익스플로잇 스크립트가 포함되어 있습니다. 이 스크립트는 악성 pickle 파일을 ClearML에 업로드하여 대상 머신에서 리버스 셸 또는 사용자 지정 명령을 실행하도록 설계되었습니다. 기능 악성 pickle 아티팩트를 ClearML에 업로드합니다. 대상 머신에서 리버스 셸 또는 사용자 지정 명령을 실행합니다. 사용자 지정 프로젝트 및 작업 이름을 지원합니다. 작업에 태그를 설정할 수 있습니다. 사용법 사전 요구 사항 Python 3....
WSO2-2021-1260
WSO2-2021-1260: WSO2 ESB에서 아티팩트 이름의 경로 탐색을 통한 임의 파일 삭제 Artifact Upload 기능의 사용자 입력이 검증되지 않아, "artifactName" 매개변수의 경로 탐색을 악용하여 임의 파일 삭제 공격을 수행할 수 있습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. 왜 CVE가 없나요? 저와 공급업체 모두 이 취약점에 대해 CVE를 요청하지 않았습니다. 요구 사항: 이 취약점을 악용하려면 다음이 필요합니다: 유효한 사용자 자격 증...
CVE-2026-14504
An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
Path Traversal
Jenkins Redpen – Pipeline Reporter for Jira Plugin is vulnerable to Path Traversal. The vulnerability is due to insufficient path validation of the workspace directory during artifact upload, where the plugin fails to enforce proper directory constraints, allowing attackers with Item/Configure...
CVE-2025-9571
A remote code execution RCE vulnerability exists in Google Cloud Data Fusion. A user with permissions to upload artifacts to a Data Fusion instance can execute arbitrary code within the core AppFabric component. This could allow the attacker to gain control over the Data Fusion instance,...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via improper validation of the workspace directory path during artifact upload. An attacker can access arbitrary files from the Jenkins controller workspace directory by supplying crafted paths. Details A Directory...
Jenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerability
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643
The Jenkins Redpen - Pipeline Reporter for Jira Plugin (versions 1.054.v7b_9517b_6b_202 and earlier) is vulnerable to a path traversal flaw. The root cause is a failure to perform adequate path validation of the workspace directory during the artifact upload process to Jira. This allows authentic...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-9571
CVE-2025-9571 is a remote code execution vulnerability in Google Cloud Data Fusion. An attacker with permission to upload artifacts to a Data Fusion instance can execute arbitrary code in the core AppFabric component, potentially gaining control of the Data Fusion instance and leading to unauthor...
CVE-2025-9571 Arbitrary Code Execution in Google Cloud Data Fusion via Malicious Artifact Upload
A remote code execution RCE vulnerability exists in Google Cloud Data Fusion. A user with permissions to upload artifacts to a Data Fusion instance can execute arbitrary code within the core AppFabric component. This could allow the attacker to gain control over the Data Fusion instance,...
CVE-2025-9571 Arbitrary Code Execution in Google Cloud Data Fusion via Malicious Artifact Upload
A remote code execution RCE vulnerability exists in Google Cloud Data Fusion. A user with permissions to upload artifacts to a Data Fusion instance can execute arbitrary code within the core AppFabric component. This could allow the attacker to gain control over the Data Fusion instance,...
PT-2025-50361
Name of the Vulnerable Software and Affected Versions Jenkins Redpen - Pipeline Reporter for Jira Plugin versions 1.054.v7b 9517b 6b 202 and earlier Description The Jenkins Redpen - Pipeline Reporter for Jira Plugin does not properly validate file paths within the workspace directory during...
