433 matches found
user-scanner v1.5.2
User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 2720+ total scan vectors —including 210+ email-integrated sites and 2510+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames...
com.thalesgroup.dtkit:dtkit-metrics-hudson-api (>=0.14, <=0.14.1), com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.11, <=0.14) +29 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.397)
org.jenkins-ci.main:jenkins-core MAVEN version 1.397 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-metrics-hudson-api =0.14, =0.11, =1.5, =1.15, =0.3, =0.5.11 -...
EUVD-2022-6359
Malicious code in bioql PyPI...
CVE-2015-8031
Hudson aka org.jvnet.hudson.main:hudson-core before 3.3.2 allows XXE attacks...
org.jvnet.hudson.main:hudson-core (>=1.92, <=1.100), org.jvnet.hudson.main:hudson-war (>=1.92, <=1.100) +1 more potentially affected by CVE-2024-47855 via net.sf.json-lib:json-lib (1.0.1)
net.sf.json-lib:json-lib MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.json-lib:json-lib and may be impacted: - org.jvnet.hudson.main:hudson-core =1.92, =1.92, =1.100 - org.springmodules:spring-modules-xt 0.8a Source cves:...
[SECURITY] Fedora 38 Update: c-ares-1.28.1-1.fc38
c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...
com.github.dblock.waffle:waffle-spring-security2 (>=1.5, <=1.6), com.microsoftopentechnologies:azure-slave (>=0.1.0, <=0.3.0) +201 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (2.0.7.release)
org.springframework.security:spring-security-core MAVEN version 2.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.5...
Cross Site Request Forgery (CSRF)
com.sonyericsson.hudson.plugins.rebuild: rebuilder is vulnerable to Cross Site Request Forgery CSRF. The vulnerability exists because it does not require POST requests for an HTTP endpoint which allows an attacker to rebuild a previous build...
org.jvnet.hudson.main:hudson-test-harness (1.249) potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.2)
net.sourceforge.htmlunit:htmlunit MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.249 Source cves: CVE-2023-26119 Source advisory:...
thamesandhudsonusa.com Cross Site Scripting vulnerability OBB-3234952
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-27900
Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service...
[SECURITY] Fedora 37 Update: c-ares-1.19.0-1.fc37
c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...
SUSE CVE-2014-2059
Directory traversal vulnerability in the CLI job creation hudson/cli/CreateJobCommand.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name...
SUSE CVE-2014-2064
The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts...
USN-5828-1: Kerberos vulnerabilities
It was discovered that Kerberos incorrectly handled certain S4U2Self requests. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. CVE-2018-20217 Greg Hudson discovered that Kerberos PAC implementation...
hudsonshoes.com Cross Site Scripting vulnerability OBB-3158163
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2015-8031
Hudson aka org.jvnet.hudson.main:hudson-core before 3.3.2 allows XXE attacks...
Design/Logic Flaw
Hudson aka org.jvnet.hudson.main:hudson-core before 3.3.2 allows XXE attacks...
CVE-2015-8031
CVE-2015-8031 affects Hudson (org.jvnet.hudson.main:hudson-core) before 3.3.2, where a flaw in the XML API processing enables XXE/External Entity Injection, potentially exposing sensitive information from the Hudson master filesystem. Multiple sources (NVD, Red Hat, GHSA, CVE pages) corroborate t...
