Block 18 Logic Flaw Vulnerability

Block 18 18T is an ethereum-based virtual currency.18T has a security vulnerability in the 'approveAndCallcode' function in its smart contract implementation, which stems from the program's failure to validate the callcode.An attacker could use this vulnerability to steal assets transfer the...

CVE-2020-10502: Cross-Site Request Forgery (CSRF)

CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a crafted request...

CVE-2020-8615

A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions such as blocking legitimate instructors...

Tutor LMS < 1.5.3 - Cross-Site Request Forgery (CSRF)

Tutor LMS WordPress plugin is vulnerable to Cross-Site Request Forgery CSRF attacks. PoC As the requests for the approval and blocking of instructors are sent using the GET method, the CSRF attack to approve an attacker-controlled instructor account can be performed by having the admin visit...

CloudBees Jenkins Bitbucket Approve Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based continuous integration tools from CloudBees. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Bitbucket Approve Plugin is used in one of the plugin used to support uploading...

CVE-2019-1003057

Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

Design/Logic Flaw

Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003057

Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003057

Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003057

CVE-2019-1003057 concerns the Jenkins Bitbucket Approve Plugin. The vulnerability arises from credentials stored unencrypted in the plugin’s global configuration file on the Jenkins master/controller, specifically in org.jenkinsci.plugins.bitbucket_approve.BitbucketApprover.xml, making them viewa...

CVE-2019-1003057

Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003057

Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

PT-2019-11347 · Jenkins · Jenkins Bitbucket Approve Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Bitbucket Approve Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, the...

CVE-2019-1003057: Missing Encryption of Sensitive Data

Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

Bitbucket Approve Plugin stores credentials in plain text

Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.bitbucketapprove.BitbucketApprover.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

PT-2018-15590

Name of the Vulnerable Software and Affected Versions SAP Fiori 1.0 for SAP ERP HCM Approve Leave Request, version 2 Description The issue is due to insufficient CSRF protection, allowing an attacker to trick an authenticated user into sending an unintended request to the web server...

SmartMesh Replay Attack Vulnerability

SmartMesh SMT is a blockchain-based underlying protocol for the Internet of Things IoT, positioned in the areas of meshless communication, meshless payment, and more. The 'transferProxy' and 'approveProxy' functions in SMT's smart contract are vulnerable to replay attacks, which can be exploited ...

Globalvillage ecosystem evilReflex has an unspecified vulnerability.

Globalvillage ecosystem GVE is a virtual currency system based on blockchain technology. A security vulnerability exists in the 'approveAndCallcode' function in GVE's smart contract implementation, which stems from the program's failure to validate the callcode.An attacker could use this...

CVE-2017-16961

A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The attack uses an admin/trees/add/process request with a...

PT-2017-14664

Name of the Vulnerable Software and Affected Versions BigTree CMS versions prior to 4.2.20 Description A SQL injection issue allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The attack involves an...