JetBrains TeamCity < 2022.04.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2022.04.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some cases CVE-2022-36321 - In JetBrains TeamCity before...

CVE-2026-34597 Coolify: Authenticated Host RCE

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.470, a critical Authenticated Host Remote Code Execution RCE vulnerability was discovered in Coolify. The flaw resides in the handling of user-defined build parameters for the...

CVE-2024-45257

A Command Injection issue in the payload build page in BYOB Build Your Own Botnet 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter. This occurs in freeze in core/generators.py...

CVE-2024-45257

A Command Injection issue in the payload build page in BYOB Build Your Own Botnet 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter. This occurs in freeze in core/generators.py...

EUVD-2022-39038

Malicious code in bioql PyPI...

Exploit for Improper Input Validation in Jenkins Git_Parameter

CVE-2025-53652: Jenkins Git Parameter Plugin Unvalidated Input...

CVE-2022-36322

In JetBrains TeamCity before 2022.04.2 build parameter injection was possible...

JetBrains TeamCity Information Disclosure Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an information...

Temporary file parameter created with insecure permissions

When triggering a build from the Jenkins CLI, Jenkins creates a temporary file on the controller if a file parameter is provided through the CLI's standard input. Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates this temporary file in the default temporary directory with the default...

SUSE CVE-2016-3721

Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables...

CVE-2022-36322

In JetBrains TeamCity before 2022.04.2 build parameter injection was possible...

CVE-2022-36322

In JetBrains TeamCity before 2022.04.2 build parameter injection was possible...

CVE-2022-36322

In JetBrains TeamCity before 2022.04.2 build parameter injection was possible...

Code injection

In JetBrains TeamCity before 2022.04.2 build parameter injection was possible...

CVE-2022-36322

CVE-2022-36322 affects JetBrains TeamCity prior to 2022.04.2, where build parameter injection was possible via the build configuration workflow. The vulnerability lies in build parameter handling, enabling injection that could impact confidentiality, integrity, and availability as indicated by th...

Jenkins Extra Columns 跨站脚本漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

JetBrains TeamCity Information Disclosure Vulnerability (CNVD-2021-09320)

TeamCity is a Java-based build management and continuous integration server from JetBrains. An information disclosure vulnerability exists in JetBrains TeamCity versions prior to 2020.2. An attacker can exploit the vulnerability to obtain an ECR token from a build parameter...

CVE-2021-25776

In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters...

CVE-2021-25776

In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters...

JetBrains TeamCity 安全漏洞

TeamCity is a Java-based build management and continuous integration server from JetBrains. An information disclosure vulnerability exists in JetBrains TeamCity versions prior to 2020.2. An attacker can exploit the vulnerability to obtain an ECR token from a build parameter...