195 matches found
CVE-2026-111096
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible...
CVE-2026-111096
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible...
CVE-2026-111096
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible...
EUVD-2026-102149
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible...
CVE-2026-111096
The JetBrains TeamCity software is affected by a stored Cross-Site Scripting (XSS) vulnerability in the classic build log component. This flaw exists in versions prior to 2026.2 , 2026.1.4 , and 2025.11.8 . The vulnerability allows for potential impact on confidentiality and integrity. No specifi...
CVE-2026-111096: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible...
PT-2026-114992
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure through the processing of build scan links detected in the build log. An attacker can obtain the Develocity access key configured in the global configuration by manipulating the build log to include a malicious URL,...
CVE-2026-92132
Jenkins Gradle Plugin 2.19.1252.v15196b5a6e10 and earlier requests build scan data from the build scan link detected in the build log, even when a Develocity server URL is configured in the global configuration, allowing attackers able to control the build log to capture the Develocity access key...
CVE-2026-92132
Jenkins Gradle Plugin 2.19.1252.v15196b5a6e10 and earlier requests build scan data from the build scan link detected in the build log, even when a Develocity server URL is configured in the global configuration, allowing attackers able to control the build log to capture the Develocity access key...
Security Bulletin: Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
Summary Langflow provides a visual interface for constructing and executing AI-powered agent workflows, exposing HTTP API endpoints for flow execution, file management, vector store operations, and Model Context Protocol MCP server configuration. An attacker could exploit insufficient validation...
CVE-2026-10276 hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgery
A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0. This vulnerability affects the function jobPath of the file src/index.ts of the component getbuildstatus/getbuildlog/triggerbuild. Such manipulation leads to server-side request forgery. The attack may be performed from remote. T...
EUVD-2012-1131
Malware in sbrugna...
EUVD-2022-5244
Malicious code in bioql PyPI...
EUVD-2023-1623
Malicious code in bioql PyPI...
EUVD-2025-20864
Malicious code in bioql PyPI...
EUVD-2023-41891
Malicious code in bioql PyPI...
EUVD-2022-6582
Malicious code in bioql PyPI...