jenkins-plugins: blueocean: CSRF vulnerability in Blue Ocean Plugin allows capturing credentials

A flaw was found in the blueocean Jenkins plugin. Affected versions of this plugin allow attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job...

outerbanksbluesales.com Cross Site Scripting vulnerability OBB-3851101

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Jspxcms Cross-Site Scripting Vulnerability

Blue Intelligence Technology Jspxcms is a scalable enterprise-level open source web content management system CMS from China's Blue Intelligence Technology Company. A cross-site scripting vulnerability exists in Jspxcms version 10.2.0. An attacker can exploit this vulnerability to perform...

Perfecting the Defense-in-Depth Strategy with Automation

Medieval castles stood as impregnable fortresses for centuries, thanks to their meticulous design. Fast forward to the digital age, and this medieval wisdom still echoes in cybersecurity. Like castles with strategic layouts to withstand attacks, the Defense-in-Depth strategy is the modern...

CVE-2024-0887

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

CVE-2024-0887

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

Information disclosure

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

CVE-2024-0887 Mafiatic Blue Server Connection denial of service

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

CVE-2024-0887 Mafiatic Blue Server Connection denial of service

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

CVE-2024-0887

The CVE-2024-0887 entry affects Mafiatic Blue Server 1.1, specifically the Connection Handler component. Affected functionality allows remote exploitation to cause denial of service. The vulnerability is publicly disclosed (VDB-252038), with exploit details referenced in multiple sources. Exploit...

PT-2024-15892 · Unknown · Mafiatic Blue Server

Name of the Vulnerable Software and Affected Versions: Mafiatic Blue Server version 1.1 Description: A problematic issue has been found in the Connection Handler component, leading to denial of service. The attack can be launched remotely. The issue affects some unknown functionality of the...

Blue Server Security Vulnerability

Blue Server is a WAMP package that allows you to run a web server with Apache, MySQL, PHP and phpMyAdmin on any Microsoft Windows operating system. A security vulnerability exists in Blue Server version 1.1, which stems from the component Connection Handler that can cause a denial of service...

blue-flamingo.fr Cross Site Scripting vulnerability OBB-3842105

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

FalconHound - A Blue Team Multi-Tool. It Allows You To Utilize And Enhance The Power Of Blo odHound In A More Automated Fashion

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggregation tool. One of the challenging aspects of BloodHound is that it is a snapshot in time...

blue-style.com Cross Site Scripting vulnerability OBB-3827241

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-9403 · Microsoft · Windows 11 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 affected versions not specified Description: A Denial of Service in the CLFS.sys driver allows a malicious authenticated low-privilege user to...

CVE-2023-48769

Cross-Site Request Forgery CSRF vulnerability in Blue Coral Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back.This issue affects Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back: from n/a through 2.3...

CVE-2023-48769

Cross-Site Request Forgery CSRF vulnerability in Blue Coral Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back.This issue affects Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back: from n/a through 2.3...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Blue Coral Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back.This issue affects Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back: from n/a through 2.3...

CVE-2023-48769

CVE-2023-48769 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back.” The vulnerability is associated with the function or endpoint cbb_submit_settings_data and affects versi...