81 matches found
CVE-2019-10392
CVE-2019-10392 RCE con Git Client Plugin 2.8.2 Autenticado 0x01 Inicio de Docker docker run -p 8080:8080 -p 50000:50000 jenkins/jenkins:lts-alpine 0x02 Entorno de vulnerabilidad root@kitploit: Jenkins 2.176.3 Git Client Plugin 2.8.2 https://updates.jenkins-ci.org/download/plugins/git-client/ Git...
jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4
Git 客户端插件 简介 git client 插件为 Jenkins 插件提供 Git 应用程序编程接口 API。 它可以获取、检出、分支、列出、合并和标记仓库。 有关具体 API 详情，请参阅 API 文档。 GitClient 接口 提供了访问 Git 的主要入口点。 它支持由 Jenkins 凭证插件 提供的用户名/密码凭证和私钥凭证。 更新日志 从 git client plugin 2.8.1 开始，发布说明记录在 GitHub 中。 之前的发布说明记录在 Jenkins wiki 上。 实现 git client 插件的默认实现要求在主控制器和每个使用 Git...
Exploit for Path Traversal in Vmware Cloud_Foundation
VMware vCenter Server RCE — CVE-2021-21972 Research Lab Indep...
CVE-2026-57282
Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script, allowing attackers able to control the name of a build's working directory to execute arbitrary operating system commands on the agent...
CVE-2026-57282
Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script, allowing attackers able to control the name of a build's working directory to execute arbitrary operating system commands on the agent...
CVE-2026-57282
Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script, allowing attackers able to control the name of a build's working directory to execute arbitrary operating system commands on the agent...
Jenkins plugins Multiple Vulnerabilities (2026-06-24)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing...
RHCOS 3 : OpenShift Container Platform 3.11 jenkins-2-plugins (RHSA-2020:2478)
The remote Red Hat Enterprise Linux CoreOS 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2478 advisory. - jenkins-git-client-plugin: OS command injection via 'git ls-remote' CVE-2019-10392 - jenkins-script-security-plugin: sandbox...
Malicious Package
Overview mona-client-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-62291
In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...
OS Command Injection
Jenkins Git Client Plugin is vulnerable to OS Command Injection. The vulnerability is due to improper escaping of the workspace directory path when constructing arguments in a temporary shell script, where an attacker who can control the workspace directory name can inject and execute arbitrary...
Information Disclosure
Jenkins Git Client Plugin is vulnerable to an Information Disclosure. The vulnerability is due to differential form validation behavior, where Git URL validation responses vary based on whether an attacker-specified file path exists on the Jenkins controller when using the amazon-s3 protocol,...
EUVD-2025-202456
Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin...
Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin
Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands...
Jenkins plugin Git client 安全漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...
Jenkins plugins Multiple Vulnerabilities (2025-12-10)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins Coverage Plugin 2.3054.ve1ff7baa123b and earlier does not validate the configured coverage results ID when creating coverage result...
EUVD-2016-2078
Malware in sbrugna...
EUVD-2022-42546
Malicious code in bioql PyPI...