Malicious code in dropbox-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afdb751e57da5540b343e220fab07e5aa40ad53e4bf33fbadb1e8f53d8469261 The OpenSSF Package Analysis project identified 'dropbox-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-435 Malicious code in dropbox-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afdb751e57da5540b343e220fab07e5aa40ad53e4bf33fbadb1e8f53d8469261 The OpenSSF Package Analysis project identified 'dropbox-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 710b36fc278e57d50e7ce86d489ae5e2da89f2ac58f80653232e0b2f7283e451 The OpenSSF Package Analysis project identified 'coinbase-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-419 Malicious code in coinbase-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 710b36fc278e57d50e7ce86d489ae5e2da89f2ac58f80653232e0b2f7283e451 The OpenSSF Package Analysis project identified 'coinbase-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67f6356994dd39435390e83ed9cb9495679ba7bd9430eb6deb610ff5a59ed159 The OpenSSF Package Analysis project identified 'amazon-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-375 Malicious code in amazon-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67f6356994dd39435390e83ed9cb9495679ba7bd9430eb6deb610ff5a59ed159 The OpenSSF Package Analysis project identified 'amazon-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple CVEs in IBM Java SDK

Summary There are multiple vulnerabilities in IBM Java SDK, Java Technology Edition used by IBM App Connect Enterprise Runtime and IBM Integration Bus for z/OS Runtime. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit...

Jenkins plugins Multiple Vulnerabilities (2025-01-22)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins OpenId Connect Authentication Plugin 4.452.v2849bd3945fa and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as...

Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin

The Jenkins OpenId Connect Authentication Plugin 4.452.v2849bd3945fa and earlier treats usernames as case-insensitive. On a Jenkins instance configured with a case-sensitive OpenID Connect provider, this allows attackers to log in as any user by providing a username that differs only in letter...

GHSA-Q9CM-88JX-3VFW Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin

The Jenkins OpenId Connect Authentication Plugin 4.452.v2849bd3945fa and earlier treats usernames as case-insensitive. On a Jenkins instance configured with a case-sensitive OpenID Connect provider, this allows attackers to log in as any user by providing a username that differs only in letter...

CVE-2025-24399

Jenkins OpenId Connect Authentication Plugin 4.452.v2849bd3945fa and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as case-insensitive, allowing attackers on Jenkins instances configured with a case-sensitive OpenID Connect provider to log in as any user by providing a username that...

CVE-2025-24399

Jenkins OpenId Connect Authentication Plugin 4.452.v2849bd3945fa and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as case-insensitive, allowing attackers on Jenkins instances configured with a case-sensitive OpenID Connect provider to log in as any user by providing a username that...

CVE-2025-24399

Jenkins OpenId Connect Authentication Plugin 4.452.v2849bd3945fa and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as case-insensitive, allowing attackers on Jenkins instances configured with a case-sensitive OpenID Connect provider to log in as any user by providing a username that...

CVE-2025-24399

Jenkins OpenId Connect Authentication Plugin 4.452.v2849bd3945fa and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as case-insensitive, allowing attackers on Jenkins instances configured with a case-sensitive OpenID Connect provider to log in as any user by providing a username that...

CVE-2025-24399

CVE-2025-24399 affects the Jenkins OpenId Connect Authentication Plugin. The vulnerability arises because the plugin versions 4.452.v2849b_d3945fa_ and earlier (except 4.438.440.v3f5f201de5dc) treat usernames as case-insensitive, which on a Jenkins instance with a case-sensitive OpenID Connect pr...

Malicious code in canva-connect-api-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b678e20c1bba076695f221d78bccaa03e07883cd72690dcb6bf357845c03d3a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

PoC for CVE-2025-0282 Remote Unauthenticated Stack Buffer O...

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

PoC for CVE-2025-0282 Remote Unauthenticated Stack Buffer O...

PT-2025-5357 · Jenkins · Jenkins Openid Connect Authentication Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpenId Connect Authentication Plugin versions 4.452.v2849b d3945fa and earlier, except version 4.438.440.v3f5f201de5dc Description: The issue allows attackers to log in as any user by providing a username that differs only in letter...

The vulnerability of the OAuth and OpenID Connect Single Sign On module in Drupal CMS systems allows attackers to perform cross-site scripting attacks.

The vulnerability of the OAuth and OpenID Connect Single Sign On module in Drupal systems is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...