CVE-2022-34200

A cross-site request forgery CSRF vulnerability in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers to connect to an attacker-specified URL...

CVE-2022-34199

CVE-2022-34199 concerns the Jenkins Convertigo Mobile Platform Plugin (version 1.1 and earlier). The vulnerability arises because passwords are stored unencrypted in the plugin’s configuration files (job config.xml) on the Jenkins controller, making them viewable by users with Extended Read permi...

CVE-2022-34199

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

mobilehealth.com Cross Site Scripting vulnerability OBB-2663573

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of iRZ mobile router microprogramming software, related to the manipulation of cross-site requests, allows a hacker to perform a CSRF attack.

The vulnerability of iRZ mobile router microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

PT-2022-22068 · Jenkins · Jenkins Convertigo Mobile Platform Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Convertigo Mobile Platform Plugin versions 1.1 and earlier Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins controller. This can be viewed by users with Extended Read permission o...

PT-2022-22070 · Jenkins · Jenkins Convertigo Mobile Platform Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Convertigo Mobile Platform Plugin versions 1.1 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified URL. Recommendations: For Jenkins Convertigo Mobile Platform Plugin versio...

Jenkins Plugin Convertigo Mobile Platform 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. The vulnerability stems from a failure to perform permission checks in the...

Mitigate Ransomware in a Remote-First World

Ransomware has been a thorn in the side of cybersecurity teams for years. With the move to remote and hybrid work, this insidious threat has become even more of a challenge for organizations everywhere. 2021 was a case study in ransomware due to the wide variety of attacks, significant financial...

Hyland Onbase Application Server 安全漏洞

Hyland Onbase Application Server is an enterprise information platform server from Hyland USA. Designed to manage content, processes and cases. A security vulnerability exists in Hyland Onbase Application Server versions prior to 20.3.58.1000 and Onbase versions 21.1.1.1000 through 21.1.15.1000. ...

Malicious code in mattermost-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 559bbd230a61f27a67472272f7ad0d54492d8e9f0fe8245c3c67aa9987efd1d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4500 Malicious code in mattermost-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 559bbd230a61f27a67472272f7ad0d54492d8e9f0fe8245c3c67aa9987efd1d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mattermost-mobile-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1307116dedf590909799162cf8b3c892665ef1f1e6c9301aa3ae7c7dae92e04f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4501 Malicious code in mattermost-mobile-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1307116dedf590909799162cf8b3c892665ef1f1e6c9301aa3ae7c7dae92e04f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1575 Malicious code in billpay-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a759527abbcec42ad5ff8cf7e6895167d38072691372ff862df1d4b9e38373b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in billpay-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a759527abbcec42ad5ff8cf7e6895167d38072691372ff862df1d4b9e38373b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mobile-guild-kb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5411acc8e88aa97cb7acff34873c8baf6b92d02bd87cd23292294dae6a232ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4651 Malicious code in mobile-guild-kb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5411acc8e88aa97cb7acff34873c8baf6b92d02bd87cd23292294dae6a232ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shineout-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 464fcb75d15a9834db9381502bb0698a424a9423127dc465313aaf6e27b9bbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in statusim-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bd2cb491732cf09ea01c6998ed53b9bbe6e617f6dc92f745da1298a8b0da6c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...