JetBrains TeamCity > 2023.11.3 - Authentication Bypass

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible id: CVE-2024-23917 info: name: JetBrains TeamCity 2023.11.3 - Authentication Bypass author: iamnoooob,rootxharsh,pdresearch severity: critical description: | In JetBrains TeamCity before 2023.11.3...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 faker python CVE-2024-27198-RCE.py -t http://192.168.198.173:8111 --behinder4...

CVE-2024-27198-SOC-Lab

CVE-2024-27198 — SOC Detection & Incident Response Lab Authentication Bypass in JetBrains TeamCity | CVSS Score: 9.8 Critical This project builds a complete SOC Lab environment to simulate, detect, and respond to CVE-2024-27198 — an authentication bypass vulnerability in JetBrains TeamCity...

CVE-2023-42793

CVE-2023-42793 JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE Usage To get a reverse shell python3 exploit.py References https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/...

CVE-2023-45612-PoC

CVE-2023-45612 https://nvd.nist.gov/vuln/detail/CVE-2023-45612 Description of CVE In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE. The vulnerability was patched by @marychatte on Sep 29, 2023 https://github.com/ktorio/ktor/pull/3770...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 python CVE-2024-27198-RCE.py -h | | / | | \ / | | | |/ / | ' | | | | | | | | | |...

RCity-CVE-2024-27198

RCity - CVE-2024-27198 RCE & Admin Account Creation & CVE-2024-27199 Auth Bypass Exploiting CVE-2024-27198 & CVE-2024-27199 RCity is a Python script that interacts with a vulnerable TeamCity server. The CVE facilitates for unauthorised admin account creation, bypassing 403's on the domain. Whilst...

ktor-xxe-poc

CVE-2023-45612: JetBrains Ktor XXE Proof of Concept This repository contains a vulnerable Ktor server to demonstrate the XML External Entity XXE injection vulnerability identified in CVE-2023-45612. The vulnerability exists in Ktor versions before 2.3.5 when the ContentNegotiation plugin is used...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 faker ! Problem There are currently some problems: 1. If yakit proxy is not used,...

CVE-2024-27198

CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE. Download git clone...

CVE-2026-123857

In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection...

CVE-2026-123851

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters...

CVE-2026-123855

In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs...

CVE-2026-123856

In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server...

CVE-2026-123852

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates...

CVE-2026-123850

In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives...

CVE-2026-123835

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition...

CVE-2026-123836

In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup...

EUVD-2026-118316

In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server...

CVE-2026-123856

The JetBrains Toolbox App versions before 3.6.1 are vulnerable to NTLM hash disclosure . This issue occurs when the application processes SVG tool icons from a Remote Development server . There are no specific details provided regarding the root cause or remediation, and no exploit information is...