Lucene search
+L

341 matches found

Github Security Blog
Github Security Blog
added 2025/10/29 3:31 p.m.16 views

Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery

Jenkins Start Windocks Containers Plugin 1.4 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site reque...

4.3CVSS6.7AI score0.00195EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.20 views

PT-2025-44291

Name of the Vulnerable Software and Affected Versions Jenkins Nexus Task Runner Plugin versions 0.9.2 and earlier Description A missing permission check allows attackers with Overall/Read permission to connect to a URL specified by the attacker, using credentials also specified by the attacker. T...

4.3CVSS6.4AI score0.00232EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/10/27 9:16 p.m.12 views

CVE-2025-62778 Frappe Learning allowed students to access the Quiz Form via direct URL

Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL...

5.3CVSS0.00202EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/27 9:16 p.m.22 views

CVE-2025-62778

CVE-2025-62778 affects Frappe Learning (LMS) prior to version 2.39.1. The issue allows students to access the Quiz Form directly via URL, implying unauthorized access to quiz content. Root cause and impact details are stated in multiple sources but no exploit specifics are provided. Mitigation re...

5.3CVSS6.3AI score0.00202EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/10/24 11:25 a.m.17 views

CVE-2025-10861 Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.4 - Unauthenticated Server-Side Request Forgery

The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.1.4. This is due to insufficient validation on the URLs supplied via the URL parameter...

7.5CVSS0.00358EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/23 12:00 a.m.13 views

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

6.9CVSS6.4AI score0.00378EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-17151

Malware in sbrugna...

4.9CVSS5AI score0.02138EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-1999-0289

Malware in sbrugna...

5CVSS6.4AI score0.03712EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2015-1367

Malware in sbrugna...

5CVSS9.3AI score0.01243EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2012-4828

Malware in sbrugna...

5CVSS6.1AI score0.00762EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-10232

Malware in sbrugna...

8CVSS6.4AI score0.00703EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2016-9210

Malware in sbrugna...

6.5CVSS6.9AI score0.01319EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2017-10207

Malware in sbrugna...

4.3CVSS4.8AI score0.00739EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2002-1940

Malware in sbrugna...

7.5CVSS6.4AI score0.01813EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-15266

Malware in sbrugna...

8.1CVSS6.7AI score0.02311EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-20533

Malware in sbrugna...

7.5CVSS7.5AI score0.01326EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-1439

Malware in sbrugna...

4.3CVSS9.3AI score0.01328EPSS
SaveExploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2007-3933

Malware in sbrugna...

8.3CVSS6.1AI score0.03299EPSS
SaveExploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2018-1207

Malware in sbrugna...

5.8CVSS6.2AI score0.02502EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2005-0286

Malware in sbrugna...

4.6CVSS6.4AI score0.01431EPSS
SaveExploits1References6
Rows per page
Query Builder