40 matches found
CVE-2026-100253
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...
CVE-2026-100253
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...
CVE-2026-100253
JetBrains TeamCity versions prior to 2026.2 , 2026.1.4 , and 2025.11.8 are vulnerable to a sandbox escape leading to code execution . The root cause is located within the versioned settings Kotlin DSL . No specific exploit details or in-the-wild exploitation information are provided in the docume...
EUVD-2026-89997
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...
CVE-2026-100253
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...
JetBrains TeamCity < 2025.11.6 / 2026.1.x < 2026.1.2 Code Execution (CVE-2026-65906)
The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.6, or version 2026.1 up to but not including 2026.1.2. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution via Kotlin DSL sandbox escape was possible...
JetBrains TeamCity < 2025.11.6 / 2026.x < 2026.1.2 Code Execution (CVE-2026-65907)
The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.6, or prior to 2026.1.2. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible CVE-2026-65907 Note that Nessus has not tested...
JetBrains TeamCity < 2018.2.3 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2018.2.3. It is, therefore, affected by multiple vulnerabilities: - A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.3. CVE-2019-12844 - The...
CVE-2026-65906
CVE-2026-65906 affects JetBrains TeamCity versions prior to 2026.1.2 and prior to 2025.11.6. The vulnerability enables remote code execution via a sandbox escape in the Kotlin DSL used for configuration. The root cause is a sandbox escape in the Kotlin DSL, allowing code execution with high impac...
EUVD-2026-48251
In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible...
CVE-2026-65906: Improper Control of Generation of Code
In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible...
EUVD-2024-22301
Malicious code in bioql PyPI...
CVE-2024-24938
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation...
CVE-2019-12845
The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3...
BIT-GRADLE-2021-29428 Local privilege escalation through system temporary directory
In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...
JetBrains TeamCity Directory Traversal Vulnerability
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a directory...
JetBrains TeamCity < 2023.11.2 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2023.11.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed CVE-2024-24936 - In JetBrains TeamCity before...
CVE-2024-24938
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation...
