Lucene search
+L

923 matches found

Kitploit
Kitploit
added 2023/10/24 11:30 a.m.68 views

Facad1ng - The Ultimate URL Masking Tool - An Open-Source URL Masking Tool Designed To Help You Hide Phishing URLs And Make Them Look Legit Using Social Engineering Techniques

Facad1ng is an open-source URL masking tool designed to help you Hide Phishing URLs and make them look legit using social engineering techniques. Your phishing link: https://example.com/whatever Give any custom URL: gmail.com Phishing keyword: anything-u-want Output:...

7.4AI score
SaveExploits0References2
OSV
OSV
added 2023/10/19 8:15 p.m.7 views

CVE-2023-30633

An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It can report false TPM PCR values, and thus mask malware activity. Devices use Platform Configuration Registers PCRs to record information about device and software configuration to ensure that the boot...

5.3CVSS6.4AI score0.00212EPSS
SaveExploits0References2
Prion
Prion
added 2023/10/19 8:15 p.m.25 views

Design/Logic Flaw

An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It can report false TPM PCR values, and thus mask malware activity. Devices use Platform Configuration Registers PCRs to record information about device and software configuration to ensure that the boot...

2.1CVSS5.1AI score0.00865EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/09/27 3:19 p.m.9 views

CVE-2023-44158

Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...

7.5CVSS5.8AI score0.00633EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/27 3:19 p.m.31 views

CVE-2023-44158

Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...

7.5CVSS4.8AI score0.00633EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/27 12:1 p.m.37 views

CVE-2023-44158

Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...

3.5CVSS7.5AI score0.00633EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/27 12:1 p.m.64 views

CVE-2023-44158

CVE-2023-44158 affects Acronis Cyber Protect 15 (Linux, Windows) prior to build 35979. The root cause is insufficient masking of the token field, leading to potential disclosure of sensitive information. The CVE entry indicates a high confidentiality impact but does not detail exploitability; exp...

7.5CVSS4AI score0.00633EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/27 12:1 p.m.17 views

CVE-2023-44158

Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...

3.5CVSS6.5AI score0.00633EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/09/27 12:0 a.m.11 views

PT-2023-5780 · Acronis · Acronis Cyber Protect 15 +1

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to sensitive information disclosure due to insufficient token field masking. This could allow a remote attacker to gain unauthorized access to protected...

7.8CVSS3.9AI score0.00633EPSS
SaveExploits0References5
NVD
NVD
added 2023/09/06 1:15 p.m.30 views

CVE-2023-41934

Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask i.e., replace with asterisks usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked...

5.3CVSS5.7AI score0.00544EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/09/06 12:8 p.m.38 views

CVE-2023-41934

Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask i.e., replace with asterisks usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked...

6AI score0.00544EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/16 3:30 p.m.35 views

GHSA-PV2G-VM98-VJXF Jenkins Config File Provider Plugin improper credential masking vulnerability

Jenkins Config File Provider Plugin 952.va544a6234b46 and earlier does not mask i.e., replace with asterisks credentials specified in configuration files when they’re written to the build log. Config File Provider Plugin 953.v0432a802e4d2 masks credentials configured in configuration files if the...

4.3CVSS7.9AI score0.00651EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/08/16 3:30 p.m.39 views

Jenkins Config File Provider Plugin improper credential masking vulnerability

Jenkins Config File Provider Plugin 952.va544a6234b46 and earlier does not mask i.e., replace with asterisks credentials specified in configuration files when they’re written to the build log. Config File Provider Plugin 953.v0432a802e4d2 masks credentials configured in configuration files if the...

7.5CVSS6.8AI score0.00651EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2023/08/16 3:15 p.m.38 views

CVE-2023-40340

Jenkins NodeJS Plugin 1.6.0 and earlier does not properly mask i.e., replace with asterisks credentials specified in the Npm config file in Pipeline build logs...

7.5CVSS7.5AI score0.0053EPSS
SaveExploits0References2
CVE
CVE
added 2023/08/16 2:32 p.m.259 views

CVE-2023-40340

Summary of CVE-2023-40340: The Jenkins NodeJS Plugin (versions ≤ 1.6.0) fails to mask credentials in the Npm config file as they appear in Pipeline build logs. This improper masking can expose credentials, per the Red Hat and NVD entries, which align on the affected plugin and version range. The ...

7.5CVSS7.5AI score0.0053EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/16 12:0 a.m.11 views

PT-2023-5741 · Jenkins · Jenkins Nodejs Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins NodeJS Plugin versions 1.6.0 and earlier Description: The issue is related to the improper masking of credentials in the Npm config file in Pipeline build logs. This could allow a remote attacker to gain unauthorized access to protect...

7.8CVSS7.4AI score0.0053EPSS
SaveExploits0References8
OSV
OSV
added 2023/07/26 2:15 p.m.5 views

CVE-2023-39155

Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it...

5.3CVSS5.8AI score0.00509EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/07/26 1:54 p.m.39 views

CVE-2023-39152

Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked i.e., replaced with asterisks in the build log in some circumstances...

6.8AI score0.00769EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.11 views

PT-2023-26809 · Jenkins · Jenkins Gradle Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Gradle Plugin version 2.8 Description: The issue is related to an always-incorrect control flow implementation that may result in credentials not being masked in the build log under certain circumstances. Recommendations: For Jenkins...

6.5CVSS6.4AI score0.00769EPSS
SaveExploits0References6
Veracode
Veracode
added 2023/07/23 8:35 a.m.29 views

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists because the missing input masking in the library, allowing an attacker to gain sensitive information in the integration properties of the web interface...

7.5CVSS6.8AI score0.00912EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder