brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: gem install brakeman Using Bundler: group :development do gem 'brakeman', require: false end Using Docker: docker pull presidentbeef/brakeman Using Docker...

salus

Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...

brakeman

Brakeman Brakeman es una herramienta de análisis estático que verifica las aplicaciones Ruby on Rails en busca de vulnerabilidades de seguridad. Instalación Usando RubyGems: gem install brakeman Usando Bundler: group :development do gem 'brakeman', require: false end Usando Docker: docker pull...

brakeman v8.0.6

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...

EUVD-2019-0704

Malware in sbrugna...

EUVD-2022-3046

Malicious code in bioql PyPI...

Malicious code in dradis_brakeman (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in brakeman-translate_checkstyle_format (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6792 Malicious code in brakeman-translate_checkstyle_format (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Stored XSS vulnerability in Jenkins brakeman Plugin

brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability. This vulnerability can be exploited by users able to control the Brakeman post-build step input data.\n\nbrakeman Plugin 0.13 escap...

GHSA-7Q9R-VHG2-789W Stored XSS vulnerability in Jenkins brakeman Plugin

brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability. This vulnerability can be exploited by users able to control the Brakeman post-build step input data.\n\nbrakeman Plugin 0.13 escap...

Malicious Package

Overview brakeman-translatecheckstyleformat is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoi...

CloudBees Jenkins Brakeman plugin cross-site scripting vulnerability

CloudBees Jenkins is a web application that can use a large number of servers as build slaves to handle larger build/test loads. A cross-site scripting vulnerability exists in the Brakeman plugin in CloudBees Jenkins, version 0.12 and earlier. The vulnerability stems from a lack of proper...

CVE-2020-2122

Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data...

CVE-2020-2122

Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data...

Cross site scripting

Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data...

CVE-2020-2122

Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data...

CVE-2020-2122

CVE-2020-2122 affects Jenkins Brakeman Plugin 0.12 and earlier. The stored XSS arises because values from parsed JSON are not escaped when rendering, allowing an attacker who can control the Brakeman post-build step input data to execute code in the browser. The advisory notes that upgrading to v...

CVE-2020-2122

Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data...

CVE-2020-2122: Improper Neutralization of Input During Web Page Generation

Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data...