1935 matches found
CVE-2025-58458
In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying amazon-s3 protocol for use with JGit, allowing attackers with Overall/Read permission to check f...
CVE-2025-58458
In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying amazon-s3 protocol for use with JGit, allowing attackers with Overall/Read permission to check f...
CVE-2025-58458
The CVE-2025-58458 entry concerns the Jenkins Git client Plugin (versions 6.3.2 and earlier, excluding 6.1.4 and 6.2.1). The root cause is inconsistent validation of the Git URL field when using the amazon-s3 protocol with JGit, where the response depends on whether the specified file path exists...
PT-2025-35780
Name of the Vulnerable Software and Affected Versions: Jenkins Git client Plugin versions 6.3.2 and earlier Description: The Git URL field form validation responses differ based on whether the specified file path exists on the Jenkins controller when using the amazon-s3 protocol with JGit. This...
Linux Distros Unpatched Vulnerability : CVE-2023-51651
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes containing a Unix...
The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft
The recent mass-theft of authentication tokens from Salesloft , whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before hackers can exploit them. Now Google war...
Linux Distros Unpatched Vulnerability : CVE-2021-28690
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see...
Malicious code in frugile-s3 (npm)
The package frugile-s3 was found to contain malicious code...
MAL-2025-17083 Malicious code in ckeditor5-s3-upload (npm)
The package ckeditor5-s3-upload was found to contain malicious code...
MAL-2025-21000 Malicious code in frugal-s3 (npm)
The package frugal-s3 was found to contain malicious code...
MAL-2025-14769 Malicious code in arc-macro-s3-bucket (npm)
The package arc-macro-s3-bucket was found to contain malicious code...
MAL-2025-21072 Malicious code in fusion-plugin-s3-asset-proxying (npm)
The package fusion-plugin-s3-asset-proxying was found to contain malicious code...
Malicious code in frugal-s3 (npm)
The package frugal-s3 was found to contain malicious code...
Malicious code in strapi-upload-aws-s3 (npm)
The package strapi-upload-aws-s3 was found to contain malicious code...
Malicious code in @zalastax/nolb-react-s3 (npm)
The package @zalastax/nolb-react-s3 was found to contain malicious code...
Malicious code in ckeditor5-s3-upload (npm)
The package ckeditor5-s3-upload was found to contain malicious code...
Malicious code in acme-http-01-s3 (npm)
The package acme-http-01-s3 was found to contain malicious code...
MAL-2025-13755 Malicious code in @zalastax/nolb-react-s3 (npm)
The package @zalastax/nolb-react-s3 was found to contain malicious code...