CVE-2026-19929

OpenBoxes

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in jline-groovy (CVE-2023-50572)

Summary A vulnerability in jline-groovy that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-50572 DESCRIPTION: An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error. CWE:CWE-787:...

Exploit for CVE-2026-75429

PowerJob Server Remote Code Execution via Unauthenticated /fr...

Elasticsearch - Groovy Script RCE Detection (CVE-2015-1427)

Detects CVE-2015-1427 by POSTing a Groovy scriptfields payload to /search that executes id via Runtime.exec. !/usr/bin/env python3 -- coding: utf-8 -- """Elasticsearch Groovy scripting engine RCE CVE-2015-1427.""" import re from kittysploit import from lib.protocols.http.httpclient import...

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

EUVD-2026-53525

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431

The Jenkins Multijob Plugin versions 669.v9d96a_d9c71b_0 and earlier are vulnerable to arbitrary code execution. The root cause is that the plugin provides Groovy scripting features that do not integrate with the Script Security Plugin , failing to enforce necessary sandboxing. An attacker posses...

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431: Improper Control of Generation of Code

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

PT-2026-68266

Name of the Vulnerable Software and Affected Versions Jenkins Multijob Plugin versions 669.v9d96a d9c71b 0 and earlier Description The software provides Groovy scripting features that fail to integrate with the Script Security Plugin. This allows users with Item/Create or Item/Configure permissio...

Path traversal vulnerability in file parameters

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names. This allows attackers with Item/Configure and Item/Build permission to write files to arbitrary locations on the controller file system, restricted only by file...

Arbitrary code execution vulnerability in jenkins-multijob-plugin

jenkins-multijob-plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin. This vulnerability allows attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

Link following vulnerability allows arbitrary file creation

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of .tar and .tar.gz archives. This allows attackers able to control agent processes to provide crafted archives to the controller to write files to arbitrary...

CVE-2026-69100

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the scrip...

CVE-2026-69100 LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the scrip...

CVE-2026-69100

The CVE entry covers LAMP Rapid Development Platform up to version 5.6.2, where a flaw in GlueFactory allows unsandboxed Groovy scripts stored in database template fields to run without compilation restrictions or whitelisting. An attacker can modify or influence the script field via message temp...

EUVD-2026-52741

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the scrip...