1724 matches found
CVE-2024-27198-RCE
网络空间测绘 Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" 使用方法 我正在使用 Python3.9。 root@kitploit: pip install requests urllib3 root@kitploit: python...
RCity-CVE-2024-27198
RCity - CVE-2024-27198 RCE y Creación de Cuenta de Administrador y CVE-2024-27199 Omisión de Autenticación Explotando CVE-2024-27198 y CVE-2024-27199 RCity es un script de Python que interactúa con un servidor TeamCity vulnerable. El CVE facilita la creación de cuentas de administrador no...
CVE-2022-24342
CVE-2022-24342 JetBrains TeamCity - toma de control de cuenta mediante CSRF en autenticación de GitHub PoC CVE-2022-24342 Requisitos Uso ¿Cómo funciona? GitHub OAuth2: orden de procesamiento de parámetros de consulta CVE-2022-24342: flujo de solicitudes HTTP Requisitos JetBrains TeamCity...
CVE-2023-42793
Exploit de TeamCity CVE-2023-42793 Este script de Python explota una vulnerabilidad de seguridad CVE-2023-42793 en JetBrains TeamCity, lo que permite a un atacante crear un nuevo usuario con privilegios administrativos. Uso El script acepta como entrada una única URL de instancia de TeamCity o un...
CVE-2026-63077
Ejecución remota de código no autenticada en JetBrains TeamCity CVE-2026-63077 Descripción general Este es un script de prueba de concepto para el CVE-2026-63077. Las organizaciones pueden utilizar este script para validar su postura de detección y remediación. Para un análisis técnico completo d...
CVE-2024-27198-SOC-Lab
CVE-2024-27198 — مختبر SOC للكشف والاستجابة للحوادث تجاوز المصادقة في JetBrains TeamCity | درجة CVSS: 9.8 حرجة يبني هذا المشروع بيئة مختبر SOC كاملة لمحاكاة CVE-2024-27198 واكتشافها والاستجابة لها — وهي ثغرة تجاوز مصادقة في JetBrains TeamCity 2023.11.3 تُستغل باستخدام تقنيات الخلط بين المسارات...
CVE-2024-27198
CVE-2024-27198 JetBrains TeamCity 2023.11.4 이전 버전에서 인증 우회 취약점이 존재하여 TeamCity 서버에서 관리자 작업을 수행할 수 있습니다. 공격자는 모든 TeamCity 프로젝트, 빌드, 에이전트 및 아티팩트를 완전히 제어할 수 있으며, 최종적으로 원격 코드 실행RCE이 가능합니다. 다운로드 root@kitploit: git clone https://github.com/jrbH4CK/CVE-2024-27198.git cd CVE-2024-27198 PoC 서버 내에서 관리자 권한으로...
CVE-2023-42793
CVE-2023-42793 TeamCity CVE-2023-42793 RCE（远程代码执行） rce.py 灵感来自 - https://www.prio-n.com/blog/cve-2023-42793-attacking-defending-JetBrains-TeamCity python3 rce.py --url teamcity.runner.htb --command whoami exploit.py 此脚本复制自 https://www.exploit-db.com/exploits/51884，由 ByteHunter 制作。 该脚本返回登录凭据，并非RCE...
CVE-2024-27198-RCE
Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" Verwendung Ich verwende Python3.9. root@kitploit: pip install requests urllib3 fak...
cve-2024-56348
JetBrains TeamCity Authentifizierungs-Bypass + RCE CVE-2024-56348 PoC 📜 Beschreibung CVE-2024-56348 ist eine kritische Authentifizierungs-Bypass-Schwachstelle in JetBrains TeamCity on-premises , die alle Versionen vor 2024.12 betrifft. Die REST-API verarbeitet Anfragen an Pfade, die ;.jsp...
CVE-2024-27198-RCE
Dork di mappatura del cyberspazio Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" Come usare Sto usando Python3.9. root@kitploit: pip install requests...
CVE-2024-27198-EXPLOIT
CVE-2024-27198 - Bypass dell'autenticazione di JetBrains TeamCity JetBrains TeamCity prima della versione 2023.11.4 è affetto da una vulnerabilità di bypass dell'autenticazione che consente a utenti non autorizzati di eseguire azioni amministrative. Impatto Lo sfruttamento della vulnerabilità è...
CVE-2023-42793
CVE-2023-42793 descrizione Una vulnerabilità di sicurezza in JetBrains TeamCity consente a un attaccante di creare un nuovo utente scelto dall'attaccante con privilegi amministrativi. Esempio di utilizzo ./cve-2023-42793 http://teamcity.examplewebsite.com username password...
JetBrains TeamCity > 2023.11.3 - Authentication Bypass
In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible id: CVE-2024-23917 info: name: JetBrains TeamCity 2023.11.3 - Authentication Bypass author: iamnoooob,rootxharsh,pdresearch severity: critical description: | In JetBrains TeamCity before 2023.11.3...
CVE-2023-42793
CVE-2023-42793 JetBrains TeamCity prima della versione 2023.05.4 è vulnerabile a un bypass dell'autenticazione che porta a RCE Utilizzo Per ottenere una reverse shell root@kitploit: python3 exploit.py Riferimenti https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem...
JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution
JetBrains TeamCity 2026.1.3, 2025.11.7 contains a remote code execution caused by unauthenticated access via the agent polling protocol, letting unauthenticated attackers execute arbitrary code remotely, exploit requires no authentication. id: CVE-2026-63077 info: name: JetBrains TeamCity 2026.1....
CVE-2024-27198-POC
CVE-2024-27198 – JetBrains TeamCity प्रमाणीकरण बाईपास और RCE PoC लेखक: EynaExp क्षेत्र: शोध / रक्षात्मक सत्यापन / केवल अधिकृत परीक्षण अवलोकन इस रिपॉजिटरी में JetBrains TeamCity इंस्टेंस को लक्षित करने वाला एक प्रूफ-ऑफ-कॉन्सेप्ट मास स्कैनर शामिल है, जो CVE-2024-27198 से प्रभावित हैं — यह एक...
JetBrains TeamCity < 2021.2.1 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible. CVE-2022-24330 - In JetBrains TeamCity before 2021.2.1, the Agent...
Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198-
Nicht-authentifizierte-RCE-Ausnutzung-JetBrains-TeamCity-CVE-2024-27198- Im Februar 2024 wurden zwei neue Schwachstellen identifiziert, die den JetBrains TeamCity Server betreffen CVE-2024-27198 und CVE-2024-27199...
