PT-2025-29708 · WordPress · Malcure Malware Scanner — #1 Toolset For Wordpress Malware Removal

Name of the Vulnerable Software and Affected Versions: Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress versions through 16.8 Description: The Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary Fi...

GraphQL Introspection Scanner

This module queries a GraphQL API Endpoint to retrieve schema data by using introspection, if it is enabled on the server. This module works on all GraphQL versions. Module Options msf use auxiliary/scanner/http/graphqlintrospectionscanner msf auxiliarygraphqlintrospectionscanner show actions...

OP-SEC Multi-Router Looking Glass Web Detection

Binary data op-secmrlgdetect.nbin...

Cisco Secure Endpoint Connector Installed (macOS)

Binary data ciscosecureendpointconnectormacinstalled.nbin...

Exploit for CVE-2025-34085

CVE-2025-34085 Multi-Target RCE Scanner Mass-exploitation s...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: jenkins-plugin-manager, nrjmx, zipkin, nextflow, akhq, maven-stage0, apache-nifi-registry, flyway, keycloak-config-cli, confluent-kafka, solr, spdx-tools-java, debezium-connector-spanner, management-api-for-apache-cassandra-5.0, dependency-track, apicurio-registry,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: jenkins-plugin-manager, nrjmx, zipkin, nextflow, akhq, maven-stage0, apache-nifi-registry, flyway, keycloak-config-cli, confluent-kafka, solr, spdx-tools-java, debezium-connector-spanner, management-api-for-apache-cassandra-5.0, dependency-track, apicurio-registry,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: logstash, kafka, jenkins-plugin-manager, kserve-modelmesh, apache-nifi, commercial-elasticsearch, maven-stage0, druid, flyway, keycloak-config-cli, thingsboard, apache-tika, keycloak, sonarqube, dependency-track, neo4j, management-api-for-apache-cassandra-4.1, zaprox...

CVE-2025-53653

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

HashiCorp Vagrant Installed (macOS)

Binary data macosvagrantinstalled.nbin...

CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-32415)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32415 advisory. - In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-...

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server, related to the lack of data encryption measures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server is related to the lack of data encryption measures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CBL Mariner 2.0 Security Update: sudo (CVE-2025-32462)

The version of sudo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32462 advisory. - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor...

Azure Linux 3.0 Security Update: ansible (CVE-2023-5115)

The version of ansible installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5115 advisory. - An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to...

Cockpit Detection

Binary data cockpitdetect.nbin...

Exploit for CVE-2024-27954

CVE-2024-27954 - WordPress wp-automatic Plugin LFI Scanner Th...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-083)

The version of kernel installed on the remote host is prior to 5.15.59-33.133. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.15-2025-083 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before...

PHP 8.1.x < 8.1.33 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.33, 8.2.x prior to 8.2.29, 8.3.x prior to 8.3.23, or 8.4.x prior to 8.4.10. It is, therefore, affected by multiple vulnerabilities: - pgsql extension does not check for errors duri...

GHSA-3WGG-3J4J-3F69 Jenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokens

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file...

Cleartext Storage of Sensitive Information

Overview org.jenkins-ci.plugins:aqua-security-scanner is a Jenkins plugin for calling the Aqua API to scan a Docker image Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the storage of Scanner Tokens for Aqua API in config.xml files on the...