awesome-jenkins-rce-2019

awesome-jenkins-rce-2019 Non c'è una RCE pre-autenticazione in Jenkins dal maggio 2017, ma questa è quella giusta! Combina CVE-2018-1000861, CVE-2019-1003005 e CVE-2019-1003029 per un'esecuzione remota di codice pre-autenticazione più affidabile ed elegante! Elenco delle versioni interessate...

Firebase RTDB Rules Audit

Discovers databaseURL from Firebase web config, probes exposed rules JSON, and enumerates common RTDB paths users, admin, messages… for anonymous read access. !/usr/bin/env python3 -- coding: utf-8 -- """Deep Firebase RTDB rules audit with path enumeration.""" from kittysploit import from...

AWS S3 public object read detect

Checks anonymous read access to a user-provided object path no exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Détection lecture anonyme d'objet S3 check-only.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name"...

Azure Blob public object read detect

Checks anonymous read access to a user-provided blob path no exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Détection lecture anonyme blob Azure check-only.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name":...

AWS S3 Bucket Access Check

Check anonymous read/list exposure indicators on an AWS S3 bucket. from kittysploit import import json from urllib.parse import urlparse from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = "name": "AWS S3 Bucket Access Check", "author": "KittySploit Team...

EUVD-2022-7225

Malicious code in bioql PyPI...

CVE-2022-40308

If anonymous read enabled, it's possible to read the database file directly without logging in...

CVE-2022-40308 Apache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files

If anonymous read enabled, it's possible to read the database file directly without logging in...

PT-2022-25340 · Apache · Apache Archiva

Name of the Vulnerable Software and Affected Versions: Apache Archiva versions prior to 2.2.9 Description: The issue allows an anonymous user to read arbitrary files, including the database file, directly without logging in if anonymous read is enabled. Recommendations: For Apache Archiva version...

CVE-2022-40308

If anonymous read enabled, it's possible to read the database file directly without logging in...

CVE-2022-40308: Undefined Security Weakness

If anonymous read enabled, it's possible to read the database file directly without logging in...

GHSA-JWFR-H6JP-9P2G Jenkins allows attackers to obtain the master cryptographic key

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

CVE-2021-43039: Undefined Security Weakness

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

VulnCheck KEV: CVE-2013-0158

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

CVE-2013-0158

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

CVE-2013-0158

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

PT-2013-2140

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.498 Jenkins LTS versions prior to 1.480.2 Jenkins Enterprise versions 1.447.x prior to 1.447.6.1 Jenkins Enterprise versions 1.466.x prior to 1.466.12.1 Description The issue allows remote attackers to obtain the...

CVE-2013-0158: Undefined Security Weakness

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

jenkins: remote unauthenticated retrieval of master cryptographic key (Jenkins Security Advisory 2013-01-04)

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...