buildbot-badges (>=1.7.0, <=1.8.2), no-cloud (0.0.8) potentially affected by CVE-2026-107378 via cairosvg (1.0.22)

cairosvg PYPI version 1.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on cairosvg and may be impacted: - buildbot-badges =1.7.0, =1.8.2 - no-cloud 0.0.8 Source cves: CVE-2026-107378 Source advisory: OSV:PYSEC-2026-4204...

buildbot-badges (>=1.7.0, <=1.8.2), no-cloud (0.0.8) potentially affected by CVE-2026-107378 via cairosvg (1.0.22)

cairosvg PYPI version 1.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on cairosvg and may be impacted: - buildbot-badges =1.7.0, =1.8.2 - no-cloud 0.0.8 Source cves: CVE-2026-107378 Source advisory: OSV:GHSA-C3JG-QH8M-J3H2...

apricot-server (>=0.0.6, <=0.1.1), atxm (>=0.2.0, <=0.2.1) +19 more potentially affected by CVE-2026-106454 via twisted (23.10.0)

twisted PYPI version 23.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.6, =0.2.0, =3.10.1, =1.0.0, =23.11.0, =0.1.0, =1.1.0, =3.0.0, =4.2.0, =0.11.0, =7.1.1, =0.8.2, =0.9.0 - smpp-twisted3 0.8.0...

ayugespidertools (>=3.4.1, <=3.9.5), baotool (1.0.1) +32 more potentially affected by CVE-2026-106454 via twisted (22.10.0)

twisted PYPI version 22.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - ayugespidertools =3.4.1, =0.2.0, =3.9.2, =1.1.2.post3, =0.7.2, =1.0.0, =1.0.0b2, =0.8.0, =0.1.12, =4.0.2, =0.1.2, =0.5.1 - jaseci-serv 1.4.2.5 a...

Buildbot Panel - Detect

Buildbot panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Buildbot panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Buildbot Panel - Detect', 'description': 'Buildbot pane...

ci-buildbot (>=0.4.0, <=0.11.5), molecule (>=3.0.5, <=3.1.5) +2 more potentially affected by CVE-2026-54552 via sh (1.13.1)

sh PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - ci-buildbot =0.4.0, =3.0.5, =0.0.0.dev0, =0.1.9, =0.1.12 Source cves: CVE-2026-54552 Source advisory: OSV:GHSA-Q38V-WP89-2W55...

apricot-server (>=0.0.6, <=0.1.1), atxm (>=0.2.0, <=0.2.1) +19 more potentially affected by CVE-2026-42304 via twisted (23.10.0)

twisted PYPI version 23.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.6, =0.2.0, =3.10.1, =1.0.0, =23.11.0, =0.1.0, =1.1.0, =3.0.0, =4.2.0, =0.11.0, =7.1.1, =0.8.2, =0.9.0 - smpp-twisted3 0.8.0...

buildbot-badges (>=1.7.0, <=1.8.2), no-cloud (0.0.8) potentially affected by CVE-2026-31899 via cairosvg (1.0.22)

cairosvg PYPI version 1.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on cairosvg and may be impacted: - buildbot-badges =1.7.0, =1.8.2 - no-cloud 0.0.8 Source cves: CVE-2026-31899 Source advisory: OSV:PYSEC-2026-2122...

buildbot-badges (>=1.7.0, <=1.8.2), no-cloud (0.0.8) potentially affected by CVE-2026-31899 via cairosvg (1.0.22)

cairosvg PYPI version 1.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on cairosvg and may be impacted: - buildbot-badges =1.7.0, =1.8.2 - no-cloud 0.0.8 Source cves: CVE-2026-31899 Source advisory: OSV:GHSA-F38F-5XPM-9R7C...

EUVD-2009-0001

Malware in sbrugna...

EUVD-2009-0002

Malware in sbrugna...

EUVD-2019-0026

Malware in sbrugna...

EUVD-2019-0025

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-7313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects...

Linux Distros Unpatched Vulnerability : CVE-2019-12300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a toke...

CVE-2009-2959

Cross-site scripting XSS vulnerability in the waterfall web status view status/web/waterfall.py in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

apricot-server (>=0.0.6, <=0.1.1), atxm (>=0.2.0, <=0.2.1) +19 more potentially affected by CVE-2024-41810 via twisted (23.10.0)

twisted PYPI version 23.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.6, =0.2.0, =3.10.1, =1.0.0, =23.11.0, =0.1.0, =1.1.0, =3.0.0, =4.2.0, =0.11.0, =7.1.1, =0.8.2, =0.9.0 - smpp-twisted3 0.8.0...

ayugespidertools (>=3.4.1, <=3.9.5), baotool (1.0.1) +32 more potentially affected by CVE-2024-41671 via twisted (22.10.0)

twisted PYPI version 22.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - ayugespidertools =3.4.1, =0.2.0, =3.9.2, =1.1.2.post3, =0.7.2, =1.0.0, =1.0.0b2, =0.8.0, =0.1.12, =4.0.2, =0.1.2, =0.5.1 - jaseci-serv 1.4.2.5 a...

Cross-site Scripting (XSS)

Buildbot is vulnerable to a cross-site scripting XSS. The vulnerability is due to improper santization within the waterfall web status view status/web/waterfall.py, enabling remote attackers to inject arbitrary web script or HTML...

Cross-site Scripting (XSS)

Buildbot is vulnerable to Cross-Site Scripting XSS vulnerabilities. The vulnerability is due to improper sanitization, allowing remote attackers to inject arbitrary web script or HTML...