Exploits from Github
767 subscribers
1 photo
1.46K files
4.46K links
Download Telegram
CVE-2024-27198.zip
6.9 KB
CVE-2024-27198
Author: EynaExp

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

GitHub Link:
https://github.com/EynaExp/CVE-2024-27198-POC
CVE-2021-3560.zip
87 KB
CVE-2021-3560
Author: m4lk3rnel

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

GitHub Link:
https://github.com/m4lk3rnel/CVE-2021-3560