πNew WriteupβοΈ
βββββββββββββββ
πDate: Thu, 13 Jul 2023 18:44:00 GMT
βββββββββββββββ
βοΈTitle: 2 RCE Π² Π±Π°Π³Π±Π°ΡΠ½ΡΠΈ ΠΏΡΠΎΠ³ΡΠ°ΠΌΠΌΠ΅ EPAM
βββββββββββββββ
πLink: https://medium.com/p/76d6cd7ab7a
βββββββββββββββ
Tags: #groovy #web #rce #infosec #pentesting
βββββββββββββββ
πDate: Thu, 13 Jul 2023 18:44:00 GMT
βββββββββββββββ
βοΈTitle: 2 RCE Π² Π±Π°Π³Π±Π°ΡΠ½ΡΠΈ ΠΏΡΠΎΠ³ΡΠ°ΠΌΠΌΠ΅ EPAM
βββββββββββββββ
πLink: https://medium.com/p/76d6cd7ab7a
βββββββββββββββ
Tags: #groovy #web #rce #infosec #pentesting
Medium
2 RCE Π² Π±Π°Π³Π±Π°ΡΠ½ΡΠΈ ΠΏΡΠΎΠ³ΡΠ°ΠΌΠΌΠ΅ EPAM
ΠΠΎΠ³Π΄Π° Ρ Ρ
Π°Π½ΡΠΈΠ» ΠΏΠΎ Π±Π°ΡΠ½ΡΠΈ-ΠΏΡΠΎΠ³ΡΠ°ΠΌΠΌΠ΅ Epam, Ρ Π·Π°ΡΠ΅Π» Π² shodan ΠΈ Π²Π²Π΅Π» Π·Π°ΠΏΡΠΎΡ βssl:epam.comβ. Π’Π°ΠΌ ΠΌΠ½Π΅ ΠΏΠΎΠΏΠ°Π»ΡΡ ip 40.117.**.***. Π― ΠΈΡΠΏΠΎΠ»ΡΠ·ΠΎΠ²Π°Π»β¦
πNew WriteupβοΈ
βββββββββββββββ
πDate: Mon, 17 Jul 2023 13:35:46 GMT
βββββββββββββββ
βοΈTitle: Enabled Sign Up on Jenkins leading to Groovy Script Remote Code Execution Vulnerability
βββββββββββββββ
πLink: https://medium.com/p/6d345f5dba0d
βββββββββββββββ
Tags: #groovy_script #external_pentesting #jenkins #rce
βββββββββββββββ
πDate: Mon, 17 Jul 2023 13:35:46 GMT
βββββββββββββββ
βοΈTitle: Enabled Sign Up on Jenkins leading to Groovy Script Remote Code Execution Vulnerability
βββββββββββββββ
πLink: https://medium.com/p/6d345f5dba0d
βββββββββββββββ
Tags: #groovy_script #external_pentesting #jenkins #rce
Medium
Enabled Sign Up on Jenkins leading to Groovy Script Remote Code Execution Vulnerability
Summary : Found a Jenkins instance with Signup enabled , bypass the restrictions by signing up with corporate email account as there wasβ¦
πNew WriteupβοΈ
βββββββββββββββ
πDate: Mon, 04 Sep 2023 04:22:48 GMT
βββββββββββββββ
βοΈTitle: Abusing Templating Engines: Remote Code Execution on Jenkins Workflow Script
βββββββββββββββ
πLink: https://medium.com/p/811f3b083851
βββββββββββββββ
Tags: #jenkins_pipeline #cybersecurity #groovy_script #hacking #remote_code_execution
βββββββββββββββ
πDate: Mon, 04 Sep 2023 04:22:48 GMT
βββββββββββββββ
βοΈTitle: Abusing Templating Engines: Remote Code Execution on Jenkins Workflow Script
βββββββββββββββ
πLink: https://medium.com/p/811f3b083851
βββββββββββββββ
Tags: #jenkins_pipeline #cybersecurity #groovy_script #hacking #remote_code_execution
Medium
Abusing Templating Engines: Remote Code Execution on Jenkins Workflow Script
How we found a company wide remote code execution vulnerability, getting root access on Jenkins instances.
β€· Title: Apache NiFi Patches High-Severity Code Execution Flaw
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 14 Apr 2026 07:12:53 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Apache NiFi #Authorization Bypass #cybersecurity #Data Pipeline #Groovy Scripting #infosec #Patch Alert #rce #Tinkerpop
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 14 Apr 2026 07:12:53 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Apache NiFi #Authorization Bypass #cybersecurity #Data Pipeline #Groovy Scripting #infosec #Patch Alert #rce #Tinkerpop
Daily CyberSecurity
Apache NiFi Patches High-Severity Code Execution Flaw
Apache NiFi 2.9.0 fixes a high-severity RCE (CVE-2026-39816) in the Tinkerpop service. Secure your data pipelines and verify your annotations today!
β€· Title: IoT Under Fire: Critical CVSS 10 Expression Injection Hits OpenRemote Platform
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 15 Apr 2026 14:03:06 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_39842 #CVSS 10 #Groovy #infosec #IoT Management #IoT security #JavaScript Injection #Nashorn Engine #OpenRemote #Patch Alert #rce
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 15 Apr 2026 14:03:06 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_39842 #CVSS 10 #Groovy #infosec #IoT Management #IoT security #JavaScript Injection #Nashorn Engine #OpenRemote #Patch Alert #rce
Daily CyberSecurity
IoT Under Fire: Critical CVSS 10 Expression Injection Hits OpenRemote Platform
OpenRemote CVE-2026-39842 is a critical CVSS 10 flaw allowing RCE via JavaScript and Groovy injection. Secure your IoT assetsβupgrade to v1.22.0 now!
β€· Title: Public PoC and Technical Details Disclosed for Apache Syncope RCE
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 20 Apr 2026 13:38:48 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Apache Syncope #CVE_2025_57738 #Cyber Security #Groovy Security #Identity Management #infosec #JVM Security #proof_of_concept #rce #root access #vulnerability disclosure
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 20 Apr 2026 13:38:48 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Apache Syncope #CVE_2025_57738 #Cyber Security #Groovy Security #Identity Management #infosec #JVM Security #proof_of_concept #rce #root access #vulnerability disclosure
Daily CyberSecurity
Public PoC and Technical Details Disclosed for Apache Syncope RCE
Apache Syncope CVE-2025-57738 allows root RCE via unsandboxed Groovy. Technical details and PoC are now public. Upgrade to v3.0.14 or 4.0.2 immediately.
β€· Title: New DDoS Botnet Exploits Jenkins to Target Gaming Servers
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 01 May 2026 09:10:36 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #botnet #CI/CD security #cyber_espionage #Darktrace #ddos #Game Server Security #Gaming Industry #Groovy Script #infosec #Jenkins #rce #UDP flood
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 01 May 2026 09:10:36 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #botnet #CI/CD security #cyber_espionage #Darktrace #ddos #Game Server Security #Gaming Industry #Groovy Script #infosec #Jenkins #rce #UDP flood
Daily CyberSecurity
New DDoS Botnet Exploits Jenkins to Target Gaming Servers
Darktrace uncovers a new DDoS botnet hijacking Jenkins servers to target game servers. Protect your CI/CD pipeline from specialized gaming-layer attacks.