Cilium 安全漏洞

Cilium is an open source software from Cilium Open Source. It is used to provide and transparently secure network connectivity and load balancing between application workloads, such as application containers or processes. A security vulnerability exists in Cilium versions 1.15.0 through prior to...

MAL-2024-7968 Malicious code in kiwoeslw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bae85e2f36251f9936fb3b965298a113bd8e3f92666f152e5882d69c935545bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Studio 42 elFinder vulnerable to Incorrect Access Control

Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc...

CVE-2024-38909

Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc...

CVE-2024-38909

Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc...

CVE-2024-38909

Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows an arbitrary attacker to expose secrets, perform RCE, etc...

PT-2024-29277 · Unknown · Woodpecker

Name of the Vulnerable Software and Affected Versions: Woodpecker versions prior to 2.7.0 Description: The server allows any user to create and trigger malicious workflows, potentially leading to a host takeover or extraction of secrets normally provided to plugins. This issue can be exploited...

MAL-2024-7713 Malicious code in komcax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c911bd41972a2fa3147e74bc8e6a7905d586c2f095b8190453f09f9250c613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7720 Malicious code in stylesshert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5cac694a4e67bb70870e3509a7d3944cb0cac1bad16defa2f01f1710d070b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7721 Malicious code in stylishteks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40a8ed6d750df7841026d152bf8840677964a636c2377940003db377ae525481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7461 Malicious code in ngentot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58fbaedf7b05410b2599b41128462eff610f2872fdb8249f71c6f7098cd174b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7463 Malicious code in pempers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e84fd41469e0d0e3a2aaa287b34bb91d95fc28a2c59c47a6cd0aff32881df06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7306 Malicious code in @zitterorg/numquam-itaque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60e579c813327d8135c8bd1d872c5a4b3365b45ba47e6a1e6d658939d9061b43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7355 Malicious code in @zitterorg/quisquam-distinctio-veritatis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b58d716ac87753ce385de5e4fe92c7cc14d9678b8b3effdfb1b2366e06073cd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7141 Malicious code in @zitterorg/corporis-ducimus-est (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d734be658dd6ac5a37617c0771c1fd0ff46e71215ef0444b108b8bab6daee49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exposure of secrets through system log in Jenkins Structs Plugin

Structs Plugin provides utility functionality used, e.g., in Pipeline to instantiate and configure build steps, typically before their execution. When Structs Plugin 337.v1b04ea4df7c8 and earlier fails to configure a build step, it logs a warning message containing diagnostic information that may...

CVE-2024-39458

When Jenkins Structs Plugin 337.v1b04ea4df7c8 and earlier fails to configure a build step, it logs a warning message containing diagnostic information that may contain secrets passed as step parameters, potentially resulting in accidental exposure of secrets through the default system log...

CVE-2024-39458

When Jenkins Structs Plugin 337.v1b04ea4df7c8 and earlier fails to configure a build step, it logs a warning message containing diagnostic information that may contain secrets passed as step parameters, potentially resulting in accidental exposure of secrets through the default system log...

CVE-2024-39458

When Jenkins Structs Plugin 337.v1b04ea4df7c8 and earlier fails to configure a build step, it logs a warning message containing diagnostic information that may contain secrets passed as step parameters, potentially resulting in accidental exposure of secrets through the default system log...

CVE-2024-39458

When Jenkins Structs Plugin 337.v1b04ea4df7c8 and earlier fails to configure a build step, it logs a warning message containing diagnostic information that may contain secrets passed as step parameters, potentially resulting in accidental exposure of secrets through the default system log...