42 matches found
CVE-2025-64136
A cross-site request forgery CSRF vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server...
CVE-2025-64136
A cross-site request forgery CSRF vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server...
CVE-2025-64136
The vulnerability CVE-2025-64136 affects Jenkins Themis Plugin versions 1.4.1 and earlier. Root cause: a cross-site request forgery (CSRF) flaw due to lack of permission checks in an HTTP endpoint, allowing an attacker with Overall/Read permission to trigger requests to an attacker-specified URL/...
PT-2025-44285
Name of the Vulnerable Software and Affected Versions Jenkins Themis Plugin versions 1.4.1 and earlier Description A cross-site request forgery CSRF issue exists in Jenkins Themis Plugin. This allows attackers to potentially connect to an HTTP server specified by the attacker. A CSRF attack...
Jenkins Themis Plugin 安全漏洞
Jenkins Themis Plugin is an open source plugin for Jenkins. A security vulnerability exists in Jenkins Themis Plugin 1.4.1 and earlier versions, which stems from a lack of privilege checking and could allow an attacker to connect to a specially crafted HTTP server...
PT-2025-44286
Name of the Vulnerable Software and Affected Versions Jenkins Themis Plugin versions 1.4.1 and earlier Description A flaw exists in the Jenkins Themis Plugin where a missing permission check allows attackers possessing Overall/Read permission to establish a connection to a HTTP server specified b...
Jenkins plugin Themis 安全漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...
EUVD-2024-43342
Malicious code in bioql PyPI...
EUVD-2023-26812
Malicious code in bioql PyPI...
CVE-2023-22683
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...
CVE-2024-49276
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cliogrow Clio Grow clio-grow-form allows Reflected XSS.This issue affects Clio Grow: from n/a through = 1.0.2...
CVE-2024-49276
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cliogrow Clio Grow clio-grow-form allows Reflected XSS.This issue affects Clio Grow: from n/a through = 1.0.2...
CVE-2024-49276
CVE-2024-49276 affects Themis Solutions, Inc. Clio Grow WordPress plugin (Clio Grow Form) with Reflected XSS in input handling. Impact is High (CVSS 3.1 base score 7.1) and affects versions 1.0.2 and earlier. The vulnerability arises from improper input neutralization during Web Page Generation. ...
CVE-2024-49276 WordPress Clio Grow plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cliogrow Clio Grow clio-grow-form allows Reflected XSS.This issue affects Clio Grow: from n/a through = 1.0.2...
Malicious code in audit-themis-i18n (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 37f93a88c028e5f97cf3f81fbfea413f78a01ea84f108247d6d5abf926f0dd73 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...
MAL-2024-12210 Malicious code in audit-themis-i18n (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 37f93a88c028e5f97cf3f81fbfea413f78a01ea84f108247d6d5abf926f0dd73 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...
ssl.editionsthemis.com Cross Site Scripting vulnerability OBB-3906999
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-22683
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...
CVE-2023-22683 WordPress Clio Grow Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...