1 writeup tagged with TeamCity
TeamCity authentication bypass combined with Bookstack SSRF to read internal files and chain into remote code execution.