233 matches found
Pre-Auth Takeover of Build Pipelines in GoCD
GoCD contains a critical information disclosure vulnerability whose exploitation allows unauthenticated attackers to leak configuration information including build secrets and encryption keys. id: CVE-2021-43287 info: name: Pre-Auth Takeover of Build Pipelines in GoCD author: dhiyaneshDk severity...
CVE-2021-43287
CVE-2021-43287 POC: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url EXP: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url --attack --command "command" 면책 조항 이 도구는 학습, 연구 및 자체 점검 용도로만 사용됩니다. 불법적인 목적으로 사용해서는 안 됩니다. 이 도구를 사용하여 발생하는 모든 위험은 저와 무관합니다! 면책 조항 이 도구는 학습, 연구 및 자체 점검 용도로만 사용됩니다. 불법적인...
GoCD: Information Disclosure via Logback Configuration Injection in GoCD Agent
Summary The GoCD Agent's logging mechanism Logback allows for property substitution and custom configuration loading. By default, the config directory might not exist in the installation path. However, if an attacker creates this directory and places a specially crafted agent-launcher-logback.xml...
EUVD-2021-12790
Malware in sbrugna...
EUVD-2022-41796
Malicious code in bioql PyPI...
EUVD-2024-53111
Malicious code in bioql PyPI...
EUVD-2022-41798
Malicious code in bioql PyPI...
EUVD-2022-33577
Malicious code in bioql PyPI...
EUVD-2022-41799
Malicious code in bioql PyPI...
EUVD-2022-41797
Malicious code in bioql PyPI...
EUVD-2024-53109
Malicious code in bioql PyPI...
EUVD-2024-53110
Malicious code in bioql PyPI...
EUVD-2023-32296
Malicious code in bioql PyPI...
EUVD-2022-33579
Malicious code in bioql PyPI...
EUVD-2024-25939
Malicious code in bioql PyPI...
EUVD-2021-30232
Malicious code in bioql PyPI...
EUVD-2022-29619
Malicious code in bioql PyPI...
EUVD-2023-32295
Malicious code in bioql PyPI...