Lucene search
+L

40 matches found

Kitploit
Kitploit
added 2026/09/03 9:43 p.m.7 views

cryptomator

دعم Cryptomator يُقدَّم Cryptomator مجانًا كمشروع مفتوح المصدر على الرغم من الجهد الكبير في التطوير، ولذلك فهو يعتمد على التبرعات. إذا كنت مهتمًا أيضًا بمزيد من التطوير، فإننا نقدم لك فرصة دعمنا: تبرع لمرة واحدة أو متكرر عبر موقع Cryptomator. كن راعيًا عبر موقع الرعاة الخاص بـ Cryptomator. الرعاة...

5.9AI score
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-0399

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.00619EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2023-0475

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00769EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2023-1952

Malicious code in bioql PyPI...

7.1CVSS6.9AI score0.00624EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 3:21 a.m.15 views

CVE-2023-24433

Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.5AI score0.00769EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:21 a.m.18 views

CVE-2023-24431

A missing permission check in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS6.3AI score0.00619EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:55 a.m.15 views

CVE-2023-24432

A cross-site request forgery CSRF vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

8.8CVSS6.6AI score0.00515EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/07/12 6:30 p.m.33 views

Jenkins Orka by MacStadium Plugin missing permission check

Jenkins Orka by MacStadium Plugin 1.33 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials...

7.1CVSS6.5AI score0.00624EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/07/12 6:30 p.m.69 views

GHSA-4HM4-94G6-F23F Jenkins Orka by MacStadium Plugin missing permission check

Jenkins Orka by MacStadium Plugin 1.33 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials...

5.4CVSS6.8AI score0.00624EPSS
SaveExploits0References3
OSV
OSV
added 2023/07/12 4:15 p.m.9 views

CVE-2023-37949

A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

7.1CVSS5.8AI score0.00624EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/12 4:15 p.m.38 views

CVE-2023-37949

A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

7.1CVSS0.00624EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/12 4:15 p.m.33 views

Design/Logic Flaw

A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

5.5CVSS6.7AI score0.00624EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/07/12 3:52 p.m.65 views

CVE-2023-37949

CVE-2023-37949 describes a missing permission check in the Jenkins Orka by MacStadium Plugin (versions ≤ 1.33) exposing an HTTP endpoint. An attacker with Overall/Read can connect to an attacker-controlled URL using attacker-chosen credentials IDs obtained by another method, enabling capture of J...

7.1CVSS6.7AI score0.00624EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/07/12 3:52 p.m.44 views

CVE-2023-37949

A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

7AI score0.00624EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/12 3:52 p.m.18 views

CVE-2023-37949

A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.4AI score0.00624EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.11 views

Jenkins Plugin Orka by MacStadium 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

7.1CVSS7.1AI score0.00624EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/12 12:00 a.m.12 views

PT-2023-26196 · Macstadium +1 · Jenkins Orka By Macstadium Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Orka by MacStadium Plugin versions 1.33 and earlier Description: A missing permission check in the Jenkins Orka by MacStadium Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using...

7.1CVSS6.7AI score0.00624EPSS
SaveExploits0References6
OSV
OSV
added 2023/01/26 9:30 p.m.21 views

GHSA-GMHF-37FX-C4Q8 Missing permission checks in Jenkins Orka Plugin allow capturing credentials

Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.5AI score0.00769EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2023/01/26 9:30 p.m.33 views

CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials

A cross-site request forgery CSRF vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

8.8CVSS8.6AI score0.00515EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2023/01/26 9:30 p.m.34 views

Missing permission checks in Jenkins Orka Plugin allow capturing credentials

Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.9AI score0.00769EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder