JetBrains TeamCity > 2023.11.3 - Authentication Bypass

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible id: CVE-2024-23917 info: name: JetBrains TeamCity 2023.11.3 - Authentication Bypass author: iamnoooob,rootxharsh,pdresearch severity: critical description: | In JetBrains TeamCity before 2023.11.3...

CVE-2023-42793

CVE-2023-42793 JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE Usage To get a reverse shell root@kitploit: python3 exploit.py References https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/...

RCity-CVE-2024-27198

RCity - CVE-2024-27198 RCE & Admin Account Creation & CVE-2024-27199 Auth Bypass Exploiting CVE-2024-27198 & CVE-2024-27199 RCity is a Python script that interacts with a vulnerable TeamCity server. The CVE facilitates for unauthorised admin account creation, bypassing 403's on the domain. Whilst...

CVE-2023-42793

TeamCity CVE-2023-42793 Exploit This Python script exploits a security vulnerability CVE-2023-42793 in JetBrains TeamCity, allowing an attacker to create a new user with administrative privileges. Usage The script takes either a single TeamCity instance URL or a list of URLs as input. The provide...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" How to use I'm using Python3.9. root@kitploit: pip install requests urllib3...

CVE-2024-27198-POC

CVE-2024-27198 – JetBrains TeamCity Authentication Bypass & RCE PoC Author: EynaExp Scope: Research / Defensive Validation / Authorized Testing Only Overview This repository contains a proof-of-concept mass scanner targeting JetBrains TeamCity instances affected by CVE-2024-27198 , an...

CVE-2023-42793

CVE-2023-42793 description A security vulnerability in JetBrains TeamCity allows an attacker to create a new user given by the attacker with administrative privileges. Usage example ./cve-2023-42793 http://teamcity.examplewebsite.com username password...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" How to use I'm using Python3.9. root@kitploit: pip install requests urllib3 faker...

Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198-

Explotación-RCE-no-autenticado-JetBrains-TeamCity-CVE-2024-27198- En febrero de 2024, se identificaron dos nuevas vulnerabilidades que afectan al servidor JetBrains TeamCity CVE-2024-27198 y CVE-2024-27199...

CVE-2022-24342

CVE-2022-24342 JetBrains TeamCity - toma de control de cuenta mediante CSRF en autenticación de GitHub PoC CVE-2022-24342 Requisitos Uso ¿Cómo funciona? GitHub OAuth2: orden de procesamiento de parámetros de consulta CVE-2022-24342: flujo de solicitudes HTTP Requisitos JetBrains TeamCity...

JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution

JetBrains TeamCity 2026.1.3, 2025.11.7 contains a remote code execution caused by unauthenticated access via the agent polling protocol, letting unauthenticated attackers execute arbitrary code remotely, exploit requires no authentication. id: CVE-2026-63077 info: name: JetBrains TeamCity 2026.1....

CVE-2024-27198

CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE. Download root@kitploit: git clone...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" How to use I'm using Python3.9. root@kitploit: pip install requests urllib3 faker ...

teamcity-CVE-2026-63077-pcap

teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...

CVE-2023-42793

CVE-2023-42793 TeamCity CVE-2023-42793 RCE Remote Code Execution rce.py Inspired by - https://www.prio-n.com/blog/cve-2023-42793-attacking-defending-JetBrains-TeamCity python3 rce.py --url teamcity.runner.htb --command whoami exploit.py This script is copy of...

CVE-2024-27198-SOC-Lab

CVE-2024-27198 — Lab SOC di Rilevamento e Risposta agli Incidenti Bypass dell'autenticazione in JetBrains TeamCity | Punteggio CVSS: 9.8 Critico Questo progetto costruisce un ambiente SOC Lab completo per simulare, rilevare e rispondere a CVE-2024-27198 — una vulnerabilità di bypass...

CVE-2026-63077

Nicht authentifizierte Remote-Code-Ausführung in JetBrains TeamCity CVE-2026-63077 Übersicht Dies ist ein Proof-of-Concept-Exploit-Skript für CVE-2026-63077. Organisationen können dieses Skript verwenden, um ihre Erkennungs- und Behebungsmaßnahmen zu validieren. Für eine vollständige technische...

CVE-2024-27198-EXPLOIT

CVE-2024-27198 - JetBrains TeamCity Authentifizierungs-Bypass JetBrains TeamCity vor 2023.11.4 ist von einer Schwachstelle zur Umgehung der Authentifizierung betroffen, die es nicht autorisierten Benutzern ermöglicht, Admin-Aktionen durchzuführen. Auswirkungen Die Ausnutzung der Schwachstelle ist...

cve-2024-56348

JetBrains TeamCity Authentifizierungs-Bypass + RCE CVE-2024-56348 PoC 📜 Beschreibung CVE-2024-56348 ist eine kritische Authentifizierungs-Bypass-Schwachstelle in JetBrains TeamCity on-premises , die alle Versionen vor 2024.12 betrifft. Die REST-API verarbeitet Anfragen an Pfade, die ;.jsp...

JetBrains TeamCity < 2021.2.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible. CVE-2022-24330 - In JetBrains TeamCity before 2021.2.1, the Agent...