CVE-2024-27198

CVE-2024-27198 CVE-2024-27198 - Bypass de autenticação usando um caminho alternativo no JetBrains TeamCity Server Consulte o blog da Rapid7 para mais informações: CVE-2024-27198 e CVE-2024-27199: Múltiplas vulnerabilidades de bypass de autenticação no JetBrains TeamCity Produtos e versões afetado...

CVE-2024-27198

CVE-2024-27198 Authentifizierungs-Bypass für TeamCity Server Version 2023.11.3 und darunter. NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-27198 Rapid7 blog post:...

EUVD-2024-36043

Malicious code in bioql PyPI...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

Exploiting CVE-2024-27198-RCE Vulnerability In this project, I...

The vulnerability of the server of the Continuous Integration and Deployment system for CI/CD applications by JetBrains TeamCity, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the server of the Continuous Integration and Deployment application framework for JetBrains TeamCity is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

JetBrains TeamCity < 2024.03.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2024.03.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible CVE-2024-36373 - In JetBrains TeamCity before...

CVE-2024-36375

In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed...

JetBrains TeamCity < 2024.03.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2024.03.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible CVE-2024-35300 - In JetBrains TeamCity...

JetBrains TeamCity Server Installed (Windows)

Binary data jetbrainsteamcitywininstalled.nbin...

Exploit for Path Traversal in Jetbrains Teamcity

RCity - CVE-2024-27198 RCE & Admin Account Creation & CVE-20...

JetBrains TeamCity Server Installed (Linux)

Binary data jetbrainsteamcitynixinstalled.nbin...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

CVE-2024-27198 Auth bypass for TeamCity Server version 2...

TeamCity Server Authenticiation Bypass (CVE-2023-42793)

Binary data teamcityCVE-2023-42793.nbin...

CVE-2023-42793

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible...

JetBrains TeamCity Security Bypass Vulnerability

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Czech Republic. A security vulnerability exists in JetBrains TeamCity, which stems from the product's failure to validate user identities. An unauthenticated attacker could use the vulnerability to...

CVE-2021-31914

In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible...

CVE-2021-31914

In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible...

TeamCity Agent XML-RPC Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TeamCity Agent XML-RPC Command Execution', 'Description' = %q This module allows remote code execution on TeamCity Agents configured to use...