CVE-2024-27199

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible...

CVE-2024-27199

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible Rapid7 Analysis Overview CVE-2024-27199 is an authentication bypass vulnerability in the web component of TeamCity that arises from a path traversal issue CWE-22 and has a CVSS base score ...

CVE-2024-27198

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible...

CVE-2024-27199

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible...

Path traversal

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible...

Authentication flaw

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible...

CVE-2024-27199

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible...

CVE-2024-27199

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible...

CVE-2024-27199

CVE-2024-27199 is a JetBrains TeamCity path traversal vulnerability that could allow limited admin actions on vulnerable TeamCity servers. Affected product: TeamCity server prior to 2023.11.4; underlying issue described as a path traversal/logic flow problem in handling requests. CVSS v3.1 base s...

CVE-2024-27198

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible...

Cross-Site Scripting (XSS)

org.apache.ambari, ambari is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient validation and constraint enforcement, resulting in a stored XSS. This could potentially be exploited to perform unauthorized actions, ranging from unauthorized data access to session...

Cross Site Scripting(XSS)

org.apache.archiva, archiva-common is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation, allowing malicious scripts to be injected into web pages. This poses a risk of executing arbitrary code in the context of a user's...

Cross Site Request Forgery (CSRF)

mongo-express is vulnerable to Cross Site Request Forgery CSRF. The vulnerability is due a missing CSRF protection in an end point /admin. An attacker can exploit this to do unauthorized actions, such as deletion of a Collection...

openSUSE: Security Advisory for xorg (SUSE-SU-2023:4949-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for rpmlint (SUSE-SU-2023:0032-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-2116

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2023.11.4 Description A path traversal issue exists that allows for the bypass of authentication procedures by using an alternative path or channel. This can enable a remote attacker to perform limited...

Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated) Vulnerability

Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Exploit Author: Alok kumar email protected, Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware Version: v1.0 486A Tested...

PT-2024-18743 · Unknown · Customfrequencymanagerservice

Name of the Vulnerable Software and Affected Versions: CustomFrequencyManagerService versions prior to SMR Mar-2024 Release 1 Description: The issue is related to an improper access control vulnerability in the CustomFrequencyManagerService. This vulnerability allows local attackers to execute...

Multilaser RE160V Header Manipulation Access Bypass

[email protected] Status: RO Content-Length: 5433 Lines: 153 =====Tempest Security Intelligence - Security Advisory - CVE-2023-38944======= Access Control Bypass in Multilaser routers' Web Management Interface Author: Vinicius Moraes =====Table of...

CVE-2024-27198

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible Recent assessments: sfewer-r7 at March 04, 2024 8:24pm UTC reported: CVE-2024-27198, allows for a complete compromise of a vulnerable TeamCity server by a remote unauthenticated attacker,...