Atlassian Bitbucket 6.1.x < 6.1.2 Path Traversal Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is 5.13.x prior to 5.13.6, 5.14.x prior to 5.14.4, 5.15.x prior to 5.15.3, 5.16.x prior to 5.16.3, 6.0.x prior to 6.0.3 or 6.1.x prior to 6.1.2. It is, therefore, affected by a path...

Atlassian Bitbucket 5.14.x < 5.14.4 Path Traversal Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is 5.13.x prior to 5.13.6, 5.14.x prior to 5.14.4, 5.15.x prior to 5.15.3, 5.16.x prior to 5.16.3, 6.0.x prior to 6.0.3 or 6.1.x prior to 6.1.2. It is, therefore, affected by a path...

Atlassian Bitbucket 6.0.x < 6.0.3 Path Traversal Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is 5.13.x prior to 5.13.6, 5.14.x prior to 5.14.4, 5.15.x prior to 5.15.3, 5.16.x prior to 5.16.3, 6.0.x prior to 6.0.3 or 6.1.x prior to 6.1.2. It is, therefore, affected by a path...

Atlassian Bitbucket 5.15.x < 5.15.3 Path Traversal Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is 5.13.x prior to 5.13.6, 5.14.x prior to 5.14.4, 5.15.x prior to 5.15.3, 5.16.x prior to 5.16.3, 6.0.x prior to 6.0.3 or 6.1.x prior to 6.1.2. It is, therefore, affected by a path...

Illegal Data Center Hidden in Former NATO Bunker

Interesting: German investigators said Friday they have shut down a data processing center installed in a former NATO bunker that hosted sites dealing in drugs and other illegal activities. Seven people were arrested. ... Thirteen people aged 20 to 59 are under investigation in all, including thr...

Dark web data center in former NATO bunker seized for hosting child porn

By Waqas Authorities raided and seized a massive data bunker called “Cyberbunker 2.0” used by dark web criminals to run drugs, explicit child content. This is a post from HackRead.com Read the original post: Dark web data center in former NATO bunker seized for hosting child porn...

Security Advisory - Privilege Escalation Vulnerability in Some Huawei Products

Products Switches Routers WLAN Storage See All Solutions Cloud Data Center Enterprise Networking Intelligent Computing Solutions by Industry See All Services Training and Certification Industry Cloud Enablement Service Improvement Service Customer Support Service See All Partner Find a Partner...

CVE-2019-15001

The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0.0 before 8.1.3, from 8.2.0 before 8.2.5, from 8.3.0 before 8.3.4 and from 8.4.0 before 8.4.1 allows remote attackers with Administrator permissions to gain...

CVE-2019-15000

The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 the fixed version for 5.16.x , from 6.0.0 before 6.0.10 the fixed version for 6.0.x, from 6.1.0 before 6.1.8 the fixed version for 6.1.x, from 6.2.0 before 6.2.6 the fixed version for 6.2.x, from 6.3.0 before 6.3.5 t...

CVE-2019-15001

The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0.0 before 8.1.3, from 8.2.0 before 8.2.5, from 8.3.0 before 8.3.4 and from 8.4.0 before 8.4.1 allows remote attackers with Administrator permissions to gain...

Command injection

The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 the fixed version for 5.16.x , from 6.0.0 before 6.0.10 the fixed version for 6.0.x, from 6.1.0 before 6.1.8 the fixed version for 6.1.x, from 6.2.0 before 6.2.6 the fixed version for 6.2.x, from 6.3.0 before 6.3.5 t...

CVE-2019-15001

The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0.0 before 8.1.3, from 8.2.0 before 8.2.5, from 8.3.0 before 8.3.4 and from 8.4.0 before 8.4.1 allows remote attackers with Administrator permissions to gain...

CVE-2019-15001

CVE-2019-15001 concerns Atlassian Jira Server/Data Center, specifically the Jira Importers Plugin. The vulnerability is a server-side template injection that can be triggered by a crafted PUT request, allowing remote code execution. The issue requires Administrator permissions to exploit and has ...

CVE-2019-15000

The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 the fixed version for 5.16.x , from 6.0.0 before 6.0.10 the fixed version for 6.0.x, from 6.1.0 before 6.1.8 the fixed version for 6.1.x, from 6.2.0 before 6.2.6 the fixed version for 6.2.x, from 6.3.0 before 6.3.5 t...

CVE-2019-15000

The CVE-2019-15000 issue affects Bitbucket Server/Data Center via the commit-diff REST endpoint. The vulnerability allows anonymous code execution and reading of arbitrary files when a project/repository is publicly accessible and a user has repo access. Affected versions include Bitbucket Server...

CVE-2019-14994

The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version 3.16.8, from version 4.0.0 before version 4.1.3, from version 4.2.0 before version 4.2.5, from version 4.3.0 before version 4.3.4, and...

Security Advisory - Improper Authentication Vulnerability in Some Huawei CloudEngine Products

Products Switches Routers WLAN Storage See All Solutions Cloud Data Center Enterprise Networking Intelligent Computing Solutions by Industry See All Services Training and Certification Industry Cloud Enablement Service Improvement Service Customer Support Service See All Partner Find a Partner...

Cisco Data Center Network Manager Information Disclosure Vulnerability

An information disclosure vulnerability exists in the web-based management interface of Cisco Data Center Network Manager DCNM due to improper access controls for certain URLs on affected DCNM software. An unauthenticated, remote attacker can exploit this, by connecting to the web-based managemen...

Template injection in Jira importers plugin - CVE-2019-15001

h3. Issue Summary There was a server-side template injection vulnerability in Jira Server and Data Center, in the Jira Importers Plugin JIM. An attacker with "JIRA Administrators" access can exploit this issue. Successful exploitation of this issue allows an attacker to remotely execute code on...

Argument Injection - CVE-2019-15000

Bitbucket Server & Bitbucket Data Center had an argument injection vulnerability, allowing an attacker to inject additional arguments into Git commands, which could lead to remote code execution. Remote attackers can exploit this argument injection vulnerability if they are able to access a Git...