134 matches found
CVE-2024-41825
In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab...
The vulnerability of the Code Inspection Report Tab component in the JetBrains YouTrack project and task management software allows a hacker to perform cross-site scripting attacks.
The vulnerability of the Code Inspection Report Tab component in the JetBrains YouTrack project and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...
EUVD-2025-4199
Malicious code in bioql PyPI...
EUVD-2023-59721
Malicious code in bioql PyPI...
EUVD-2023-53940
Malicious code in bioql PyPI...
CVE-2025-26493
In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...
CVE-2025-26493
In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...
CVE-2025-26493
In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...
CVE-2025-26493
In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...
CVE-2025-26493
CVE-2025-26493 describes a DOM-based XSS in JetBrains TeamCity prior to 2024.12.2, specifically affecting the Code Inspection Report tab. The root cause is insufficient filtering/escaping of user-supplied data within that tab, enabling arbitrary script execution in the victim’s browser. Affected ...
CVE-2025-26493
In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...
PT-2025-6219
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2024.12.2 Description The issue concerns a DOM-based cross-site scripting XSS condition in the Code Inspection Report tab. This occurs due to insufficient protection of the web page structure. Exploitation...
CVE-2024-57881
In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't call pfntopage on possibly non-existent PFN in splitlargebuddy In splitlargebuddy, we might call pfntopage on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last...
PT-2025-3606 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises in the split large buddy function where pfn to page might be called on a possibly non-existent PFN. In specific corner cases, such as freeing the highest pageblock in...
CVE-2024-46677
In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an error point...
CVE-2024-43888
CVE-2024-43888 pertains to the Linux kernel memory-control path. The advisory fixes a use-after-free in mm/list_lru for memory cgroups: mem_cgroup_from_slab_obj() must be called under RCU protection (rcu_read_lock) or with appropriate locks; without it, a memcg could be freed while still used. Th...
The vulnerability of the Code Inspection control element in the CI/CD application integration and delivery system by JetBrains TeamCity allows attackers to perform cross-site scripting attacks.
The vulnerability of the Code Inspection control element in the CI/CD application integration and delivery system of JetBrains TeamCity is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-page...
JetBrains TeamCity < 2024.07 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2024.07. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.07 parameters of the password type could leak into the build log in some specific cases CVE-2024-41824 - In JetBrains...
JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2025-16721)
JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that can be exploited by an attacker to store XSS on the code inspection tab...