CVE-2018-25332

GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality. Attackers can brute-force the Blowfish encryption key, upload a malicious JAR...

CVE-2018-25332

GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality. Attackers can brute-force the Blowfish encryption key, upload a malicious JAR...

CVE-2018-25332: Missing Authentication for Critical Function

GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality. Attackers can brute-force the Blowfish encryption key, upload a malicious JAR...

Fedora: Security Advisory for maven-jar-plugin (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: maven-jar-plugin-3.3.0-6.fc40

Builds a Java Archive JAR file from the compiled project classes and resources...

com.soebes.maven.plugins:multienv-maven-plugin (0.1.0), io.github.fruitcropxl:fruitcropxl-output (>=0.0.1, <=0.0.2) +5 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (3.1.1)

org.codehaus.plexus:plexus-archiver MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.soebes.maven.plugins:multienv-maven-plugin 0.1.0 -...