Yurii Sanin

3 exploits Active since Feb 2022
CVE-2022-24342 NOMISEC HIGH WORKING POC
JetBrains TeamCity <2021.2.1 - CSRF
In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.
36 stars
CVSS 8.8
CVE-2022-25262 NOMISEC CRITICAL WORKING POC
JetBrains Hub < 2022.1.14434 - SAML Request Takeover via Insufficient Verification of Data Authenticity
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.
16 stars
CVSS 9.8
CVE-2022-25260 NOMISEC CRITICAL WORKING POC
JetBrains Hub < 2021.1.14276 - Server-Side Request Forgery
JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).
4 stars
CVSS 9.1