CVE-2025-64148

CVE-2025-64148: Jenkins Publish to Bitbucket Plugin 0.4 and earlier has a missing permission check that allows users with Overall/Read permission to enumerate credentials IDs stored in Jenkins. Connected advisories (Red Hat, GitHub GHSA, OSV, EUVD, NVD, etc.) corroborate the issue and impact. The...

CVE-2025-64148

A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

PT-2025-44297

Name of the Vulnerable Software and Affected Versions Jenkins Publish to Bitbucket Plugin versions 0.4 and earlier Description A flaw exists in the Jenkins Publish to Bitbucket Plugin where a missing permission check allows attackers possessing Overall/Read permission to enumerate credential IDs...

EUVD-2021-19501

Malware in sbrugna...

EUVD-2012-3769

Malware in sbrugna...

EUVD-2020-28016

Malware in sbrugna...

EUVD-2021-1426

Malware in sbrugna...

EUVD-2023-1608

Malicious code in bioql PyPI...

EUVD-2022-0711

Malicious code in bioql PyPI...

EUVD-2023-1181

Malicious code in bioql PyPI...

EUVD-2022-7105

Malicious code in bioql PyPI...

EUVD-2022-6277

Malicious code in bioql PyPI...

EUVD-2022-6890

Malicious code in bioql PyPI...

EUVD-2022-0550

Malicious code in bioql PyPI...

EUVD-2022-5070

Malicious code in bioql PyPI...

EUVD-2022-2206

Malicious code in bioql PyPI...

EUVD-2022-6200

Malicious code in bioql PyPI...

EUVD-2022-5582

Malicious code in bioql PyPI...

EUVD-2025-0210

Malicious code in bioql PyPI...

EUVD-2022-7182

Malicious code in bioql PyPI...