49 matches found
CVE-2024-24590-ClearML-RCE-CMD-POC
ClearML 漏洞利用脚本 本仓库包含一个针对 CVE-2024-24590 的 Python 漏洞利用脚本。该脚本旨在向 ClearML 上传一个恶意 pickle 文件，从而执行反向 Shell 或自定义命令。 功能 向 ClearML 上传恶意 pickle 工件。 在目标机器上执行反向 Shell 或自定义命令。 支持自定义项目和任务名称。 允许在任务上设置标签。 用法 先决条件 Python 3.x ClearML SDK argparse（通常已随 Python 附带） 安装 1. 克隆仓库： git clone...
WSO2-2021-1260
WSO2-2021-1260: Deletion of Arbitrary files via Path Traversal in Artifact Name in WSO2 ESB Due to the unsanitized user input in the Artifact Upload feature, an arbitrary file deletion attack could be carried out by leveraging path traversal in the "artifactName" parameter. Vendor Disclosure: The...
pickle_exploit
PickleExploit 通过 ClearML 中的 Pickle 序列化演示远程代码执行漏洞 🖥️ 此脚本由 h3x0v3rl0rd 开发。 此概念验证（PoC）演示了一个涉及使用 pickle 库对 Python 对象进行序列化和反序列化的潜在安全漏洞。具体来说，它创建了一个带有 reduce 方法的 RunCommand 类，该方法在反序列化时通过 os.system 执行反向 Shell 命令。该命令尝试建立到指定 IP 地址和端口的反向 Shell 连接。该 PoC 脚本将此恶意构造的对象作为工件上传到 ClearML...
ClearML-CVE-2024-24590
/ | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe ClearML Pickle 工件上传 PoC 本项目演示如何通过命令行参数动态上传 pickle 工件到 ClearML，并支持配置参数。该脚本初始化一个 ClearML 任务，动态配置反向 shell...
CVE-2026-14504
An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
Path Traversal
Jenkins Redpen – Pipeline Reporter for Jira Plugin is vulnerable to Path Traversal. The vulnerability is due to insufficient path validation of the workspace directory during artifact upload, where the plugin fails to enforce proper directory constraints, allowing attackers with Item/Configure...
CVE-2025-9571
A remote code execution RCE vulnerability exists in Google Cloud Data Fusion. A user with permissions to upload artifacts to a Data Fusion instance can execute arbitrary code within the core AppFabric component. This could allow the attacker to gain control over the Data Fusion instance,...
Jenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerability
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via improper validation of the workspace directory path during artifact upload. An attacker can access arbitrary files from the Jenkins controller workspace directory by supplying crafted paths. Details A Directory...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643
The Jenkins Redpen - Pipeline Reporter for Jira Plugin (version 1.054.v7b_9517b_6b_202 and earlier) is vulnerable to a path traversal (CWE-22) flaw. The root cause is insufficient path validation of the workspace directory during the artifact upload process to Jira. An attacker with Item/Configur...
CVE-2025-9571 Arbitrary Code Execution in Google Cloud Data Fusion via Malicious Artifact Upload
A remote code execution RCE vulnerability exists in Google Cloud Data Fusion. A user with permissions to upload artifacts to a Data Fusion instance can execute arbitrary code within the core AppFabric component. This could allow the attacker to gain control over the Data Fusion instance,...
CVE-2025-9571 Arbitrary Code Execution in Google Cloud Data Fusion via Malicious Artifact Upload
A remote code execution RCE vulnerability exists in Google Cloud Data Fusion. A user with permissions to upload artifacts to a Data Fusion instance can execute arbitrary code within the core AppFabric component. This could allow the attacker to gain control over the Data Fusion instance,...
CVE-2025-9571
CVE-2025-9571 is a remote code execution vulnerability in Google Cloud Data Fusion. An attacker with permission to upload artifacts to a Data Fusion instance can execute arbitrary code in the core AppFabric component, potentially gaining control of the Data Fusion instance and leading to unauthor...
PT-2025-50361
Name of the Vulnerable Software and Affected Versions Jenkins Redpen - Pipeline Reporter for Jira Plugin versions 1.054.v7b 9517b 6b 202 and earlier Description The Jenkins Redpen - Pipeline Reporter for Jira Plugin does not properly validate file paths within the workspace directory during...
