https://vulnerability.circl.lu/sightings/feed 2026-05-09T16:47:12.500790+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/00f10691-7c8c-422d-ab89-c3c98c0d888c/export 2026-05-09T16:47:12.899138+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "00f10691-7c8c-422d-ab89-c3c98c0d888c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36372", "type": "seen", "source": "Telegram/DASdBAzd_yFqiCt-TEWD5i84DOJh0xCyfOR9Q_3VL29Y", "content": "", "creation_timestamp": "2024-05-29T18:53:28.000000Z"} 2024-05-29T18:53:28+00:00 https://vulnerability.circl.lu/sighting/e5c5c633-a0e3-448a-bc6a-5b08b2ed88e0/export 2026-05-09T16:47:12.899001+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "e5c5c633-a0e3-448a-bc6a-5b08b2ed88e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36372", "type": "seen", "source": "https://t.me/DARK_SPOT_TEAM/581", "content": "\ud83d\udea8 CVE-2024-36362\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible\n\n\ud83d\udea8 CVE-2024-36363\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 several Stored XSS in code inspection reports were possible\n\n\n\n\ud83d\udea8 CVE-2024-36364\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible\n\n\n\n\ud83d\udea8 CVE-2024-36365\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent\n\n\n\n\ud83d\udea8 CVE-2024-36366\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations\n\n\n\n\ud83d\udea8 CVE-2024-36367\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via third-party reports was possible\n\n\n\n\ud83d\udea8 CVE-2024-36368\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 reflected XSS via OAuth provider configuration was possible\n\n\n\n\ud83d\udea8 CVE-2024-36369\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via issue tracker integration was possible\n\n\n\n\ud83d\udea8 CVE-2024-36370\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via OAuth connection settings was possible\n\n\n\ud83d\udea8 CVE-2024-36371\nIn JetBrains TeamCity before 2023.05.5, 2023.11.5 stored XSS in Commit status publisher was possible\n\n\n\ud83d\udea8 CVE-2024-36372\nIn JetBrains TeamCity before 2023.05.5 reflected XSS on the subscriptions page was possible\n\n\n\ud83d\udea8 CVE-2024-36373\nIn JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible", "creation_timestamp": "2024-05-29T18:53:28.000000Z"} 2024-05-29T18:53:28+00:00 https://vulnerability.circl.lu/sighting/36684342-71de-4314-876f-8b90c5892df8/export 2026-05-09T16:47:12.896720+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "36684342-71de-4314-876f-8b90c5892df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36372", "type": "seen", "source": "https://t.me/ZeroEthical_Course/320", "content": "\ud83d\udea8 CVE-2024-36362\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible\n\n\ud83d\udea8 CVE-2024-36363\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 several Stored XSS in code inspection reports were possible\n\n\n\n\ud83d\udea8 CVE-2024-36364\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible\n\n\n\n\ud83d\udea8 CVE-2024-36365\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent\n\n\n\n\ud83d\udea8 CVE-2024-36366\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations\n\n\n\n\ud83d\udea8 CVE-2024-36367\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via third-party reports was possible\n\n\n\n\ud83d\udea8 CVE-2024-36368\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 reflected XSS via OAuth provider configuration was possible\n\n\n\n\ud83d\udea8 CVE-2024-36369\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via issue tracker integration was possible\n\n\n\n\ud83d\udea8 CVE-2024-36370\nIn JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via OAuth connection settings was possible\n\n\n\ud83d\udea8 CVE-2024-36371\nIn JetBrains TeamCity before 2023.05.5, 2023.11.5 stored XSS in Commit status publisher was possible\n\n\n\ud83d\udea8 CVE-2024-36372\nIn JetBrains TeamCity before 2023.05.5 reflected XSS on the subscriptions page was possible\n\n\n\ud83d\udea8 CVE-2024-36373\nIn JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible\n\n\ud83d\udcda ZeroEthical Course \ud83d\udc8e", "creation_timestamp": "2024-06-05T05:59:45.000000Z"} 2024-06-05T05:59:45+00:00