1126 matches found
CVE-2021-31817
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext...
CVE-2021-31818
Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly. Exploiting this vulnerability could allow unauthorised access to database tables...
CVE-2021-31821
When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext. This does not affect the Linux Docker image...
CVE-2019-11632
In Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user with the VariableViewUnscoped or VariableEditUnscoped permission scoped to a specific project could view or edit unscoped variables from a different project. These permissions are only used in custom...
CVE-2020-10678
In Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to their Octopus server, an authenticated user can leverage a bug to escalate privileges...
Friday Squid Blogging: Vampire Squid Genome
The vampire squid Vampyroteuthis infernalis has the largest cephalopod genome ever sequenced: more than 11 billion base pairs. That's more than twice as large as the biggest squid genomes. It's technically not a squid: "The vampire squid is a fascinating twig tenaciously hanging onto the cephalop...
EUVD-2025-117310
Malicious code in immense-olive-octopus npm...
EUVD-2025-117329
Malicious code in hissing-moccasin-octopus npm...
Malicious code in hissing-moccasin-octopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdc8cf54d1a0f4d631242c472458584cd3c8a458610f8062f1d9c0d2d221046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117062
Malicious code in steep-harlequin-octopus npm...
MAL-2025-139040 Malicious code in steep-harlequin-octopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f387bb00bb1f855b2251f68befac3df1e9861745d83b87d91db9950be633ef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ratty_octopus_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64bf73378454296489cc08dc4b0e99332cb89b8ccc1f0bc7126001e33978301e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-136533 Malicious code in ratty_octopus_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64bf73378454296489cc08dc4b0e99332cb89b8ccc1f0bc7126001e33978301e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-134373 Malicious code in interior_octopus_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe18436f3821f2cbd20cd2d8b857a229886bbc2eced26c83c2c85ad9e4560ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-103105
Malicious code in partialoctopusz3n npm...
EUVD-2025-102149
Malicious code in skilledoctopusz3n npm...
Malicious code in legitimate_octopus_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8974ffd1cfb66c1d99bcd746eaf11050055ea5eeff80dc0caf638a0e4be48a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-102394
Malicious code in sacredoctopusz3n npm...
MAL-2025-127231 Malicious code in homeless_octopus_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08d8132d46b97ed11110678e219a5be9add42b628bdc2ba2c421cc984347d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...