481154 matches found
EUVD-2026-70146
Jenkins Customizable Header Plugin 295.v2544bca19b97 and earlier allows overwriting the plugin's appearance configuration through Stapler data binding, allowing attackers to configure a custom SVG icon containing inline JavaScript, resulting in a stored cross-site scripting XSS vulnerability...
CVE-2026-84673
CVE-2026-84673 affects the Jenkins Customizable Header Plugin in versions 295.v2544b_ca_19b_97 and earlier . The root cause is Stapler data binding , which allows an attacker with low privileges to overwrite the plugin's appearance configuration. By setting a custom SVG icon containing inline Jav...
EUVD-2026-70139
Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom Resource Definition clientID or...
CVE-2026-77180
NGINX Ingress Controller is vulnerable to a configuration injection flaw (CWE-76) in its configuration generator. Multiple user-controllable Ingress annotation fields are written into the generated NGINX configuration without sanitization , allowing an authenticated attacker with Kubernetes API w...
EUVD-2026-70141
When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...
CVE-2026-66362
CVE-2026-66362 is a configuration injection vulnerability in the NGINX configuration generator component of NGINX Gateway Fabric . When NGINX Plus is configured as the data plane, user-supplied values from the AuthenticationFilter CRD (clientID, cookieName) or the clientSecret field of a referenc...
CVE-2026-77180 NGINX Ingress Controller vulnerability
When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...
CVE-2026-66362 NGF vulnerability
Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom Resource Definition clientID or...
CVE-2026-84662
Jenkins LDAP Plugin (ldap) versions 807.809.vd3a_4e5e4ec98 and earlier suffer from an improper access control flaw that enables Server-Side Request Forgery (SSRF) . The plugin's use of Stapler's @DataBoundConstructor annotation on a constructor that connects to a specified URL allows attackers ca...
CVE-2026-84655
Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API, allowing attackers able to control map property names to inject arbitrary fields into JSON and Python API responses...
CVE-2026-84655
Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API. Attackers who can control map property names can inject arbitrary fields into JSON and Python API responses, leading to a low-impact integrity issue (CVSS ...
EUVD-2026-70121
Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API, allowing attackers able to control map property names to inject arbitrary fields into JSON and Python API responses...
CVE-2026-84651
Jenkins 2.579 and earlier (LTS 2.568.2 and earlier) contain an unsafe deserialization flaw in the REST API and CLI endpoints used to update agent configuration. An attacker holding Agent/Configure permission on one agent can specify a different agent's name in the submitted XML, overwriting that ...
CVE-2026-33310
CVE-2026-33310 CVE-2026-33310 Injection de commande via l'expansion shell dans les valeurs par défaut des paramètres Résumé La syntaxe shell dans les valeurs par défaut des paramètres semble être automatiquement développée lors du processus d'analyse du catalogue. Si un catalogue contient une...
CVE-2026-84645
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...
CVE-2026-4060-PoC
CVE-2026-4060 — Geo Mashup ≤ 1.13.18 ثغرة حقن SQL غير مصادق عليها PoC -blue المهاجمون غير المصادق عليهم يمكنهم حقن استعلامات SQL عشوائية في جملة ORDER BY عبر معامل sort في نقطة النهاية render-map الخاصة بـ Geo Mashup، مما يسمح باستخراج عمى بيانات استناداً إلى الوقت من قاعدة البيانات الحساسة. جدول...
CVE_2026_2576_PoC
CVE-2026-2576 — PoC d'injection SQLi du plugin Business Directory Injection SQL aveugle basée sur le temps, sans authentification Plugin Business Directory pour WordPress ≤ 6.4.21 Table des matières Présentation de la vulnérabilité Analyse technique Prérequis du laboratoire Configuration du...
NPM: xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
NPM: xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization vulnerability discovered by ? in WordPress Npm xmldom versions = 0.6.0...
xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
Summary An EntityReference node can be created with an invalid, attacker-controlled name through Document.createEntityReferencename. When this node is serialized directly with: js serializer.serializeToStringref, requireWellFormed: true the invalid nodeName is emitted into the serialized XML...