CVE-2015-7330

Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol...

CVE-2015-7330

Puppet Enterprise 2015.3 before 2015.3.1 is affected by CVE-2015-7330: a remote attacker can bypass the host whitelist protection mechanism by leveraging the Puppet communications protocol. The issue concerns the host-whitelist protection and is exploitable remotely via the Puppet communications ...

CVE-2014-7330

The CVE-2014-7330 entry concerns the XtendCU Mobile (com.metova.cuae.xtend) Android app version 1.0.28. The provided documents state that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a ...

Design/Logic Flaw

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330...

CVE-2014-2058

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330...

CVE-2014-2058

CVE-2014-2058 affects Jenkins (BuildTrigger) where authenticated remote users could bypass access restrictions and trigger arbitrary jobs by configuring a job to trigger another. Affected versions are Jenkins before 1.551 and LTS before 1.532.2. The issue is described as a result of an incomplete...

CVE-2013-7330

Jenkins vulnerability CVE-2013-7330 affects Jenkins before 1.502, where remote authenticated users could configure an otherwise restricted project via post-build actions. The issue is documented across multiple sources (NVD entry, OSS advisories) and is referenced in follow-up advisories noting a...

Fritz!Box Webcm Unauthenticated Command Injection

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...

Jenkins BuildTrigger类权限绕过漏洞

CVE ID:CVE-2013-7330 Jenkins的前身是Hudson是一个可扩展的持续集成引擎。 Jenkins BuildTrigger类存在安全漏洞，允许攻击者绕过授权机制配置作业，执行受限的作业。 0 Jenkins 1.550 Jenkins 1.532.1 厂商补丁： Jenkins ----- Jenkins 1.532.2, 1.551已经修复该漏洞，建议用户下载更新： http://jenkins-ci.org/...