Information Disclosure

Jenkins Git Client Plugin is vulnerable to an Information Disclosure. The vulnerability is due to differential form validation behavior, where Git URL validation responses vary based on whether an attacker-specified file path exists on the Jenkins controller when using the amazon-s3 protocol,...

Sensitive Information Disclosure

Jenkins Statistics Gatherer Plugin is vulnerable to Sensitive Information Disclosure. The vulnerability is due to storing the AWS Secret Key in plaintext in the global configuration file, allowing users with access to the Jenkins controller file system to read and misuse the credential...

Sensitive Information Disclosure

Jenkins Statistics Gatherer Plugin is vulnerable to Sensitive Information Disclosure. The vulnerability is due to failure to mask the AWS Secret Key in the global configuration UI, allowing attackers with configuration access to view and potentially capture the secret value...

Visualisation for the CIS Benchmark Scanning Results

In this paper, we introduce GraphSecure, a web application that provides advanced analysis and visualisation of security scanning results. GraphSecure enables users to initiate scans for their AWS account, validate them against specific Center for Internet Security CIS Benchmarks and return...

Malicious code in elf-stats-sparkly-fir-398 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32db911f51c2d89fb28fbfb18ca7522203bb6e5606c84bb23665427fd481feee The package elf-stats-sparkly-fir-398 was found to contain malicious code...

Malicious code in elf-stats-fuzzy-fireplace-615 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5808e96e1b7c02157ff4354234cb903035b69ad4f222a03c6027313dd56a32e4 The package elf-stats-fuzzy-fireplace-615 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-frostbitten-cookie-757 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a9b7338ba70da7f1a645de597bc81a0f98b5aae3c66f26fc2a19eca14839d6 The package elf-stats-frostbitten-cookie-757 was found to contain malicious code...

Malicious code in elf-stats-festive-sleigh-368 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1f4d8617d9417b57ac5d906d1d72bec6c8f342444d3aefcc2681d4f56ebcbe The package elf-stats-festive-sleigh-368 was found to contain malicious code...

Malicious code in elf-stats-northbound-cocoa-368 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1258968ec0a2d8ff8d1aa1baa183ee3b179957a3db53b906830d1d7ee71f57d3 The package elf-stats-northbound-cocoa-368 was found to contain malicious code...

Malicious code in elf-stats-cosy-sparkler-518 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c7b46e4d3b1b02d55b40936f0b5186828a6e91fb4c06e88608e79424c913f The package elf-stats-cosy-sparkler-518 was found to contain malicious code...

Malicious code in elf-stats-ember-cookiejar-768 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64860e1be767b489bc4e42e9766a560535039c2fae91c6d067c1d0a52b7782f6 The package elf-stats-ember-cookiejar-768 was found to contain malicious code...

Malicious code in elf-stats-evergreen-workbench-842 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea802c560ad8d3887586c434c113379e359184a4cc08d2efa334561a8bf9c The package elf-stats-evergreen-workbench-842 was found to contain malicious code...

Malicious code in elf-stats-lanternlit-cocoa-651 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c4ba4ba17635ce1b67b16f422fcc26ab1991984a3c824f4122b9421c2aac2f The package elf-stats-lanternlit-cocoa-651 was found to contain malicious code...

Malicious code in elf-stats-marzipan-nightcap-982 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1d00b97d1bd29964e9911023158c1b8d6859d3d2da73cc201ff9c1edce509d The package elf-stats-marzipan-nightcap-982 was found to contain malicious code...

Malicious code in elf-stats-merry-hammer-791 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9024a10526d26173fff95d45767e8cf58b479418c69fa68a2264b87f8583daf The package elf-stats-merry-hammer-791 was found to contain malicious code...

Malicious code in elf-stats-midnight-rocket-499 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedc85815ec471eac6792ca730c4c4fad6ca00bd1a5b00de1ba99e7f8eb4d543 The package elf-stats-midnight-rocket-499 was found to contain malicious code...

Malicious code in elf-stats-sleighing-drum-467 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e63a78d85aa37039d5783759cb8885690297dbef6fbd0993e9e853764e028c3 The package elf-stats-sleighing-drum-467 was found to contain malicious code...

Malicious code in elf-stats-sugarplum-snowman-116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61641ecf461659ac8f9db30b6ab95b76512c6e0602f70e0aed51410ff00cb46d The package elf-stats-sugarplum-snowman-116 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-aurora-sleigh-694 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34711b753b62675e9bbb1491241713eeb1b612d1f1fab7a769a70c1105afc8f9 The package elf-stats-aurora-sleigh-694 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-snowdusted-bell-846 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c95bf350d04805cb78d9e899ac289fe1ebbc0801fbc256b44230b8faca92d7 The package elf-stats-snowdusted-bell-846 was found to contain malicious code...