Lucene search
K

47 matches found

Microsoft Malware Protection
Microsoft Malware Protection
added 2023/12/15 5:0 p.m.33 views

Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server

Microsoft discovered, responsibly disclosed, and helped remediate four vulnerabilities that could be remotely exploited by unauthenticated attackers in Perforce Helix Core Server “Helix Core Server”, a source code management platform largely used in the videogame industry and by multiple...

7.5CVSS10AI score0.01115EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.2 views

The vulnerability of the Git Bitbucket Server and Data Center-based code deployment, management, and collaboration tools lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Git Bitbucket Server and Data Center-based code deployment, management, and collaboration tools is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.2AI score0.14329EPSS
Exploits0References5Affected Software2
Wiz blog
Wiz blog
added 2023/02/28 4:34 p.m.9 views

Enhanced policy management with GitOps and Terraform

Wiz announces new GitOps workflows and Terraform provider, enabling customers to manage policies as code...

6.9AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2022/11/09 12:0 a.m.3 views

Git Source Code Management Code Execution (CVE-2021-21300)

An improper link resolution exists in the checkout mechanism of Git Source Code Management git-scm by Git. An out-of-order checkout triggered by a delayed checkout or checkout-index may result in an improper validation of a file resource type prior to performing a file write operation. A remote...

5.1CVSS1.8AI score0.88644EPSS
Exploits5
CNNVD
CNNVD
added 2022/05/17 12:0 a.m.4 views

Jenkins Git Plugin 信息泄露漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability...

7.5CVSS7.3AI score0.01191EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/03/22 5:31 p.m.4 views

workflow-cps-global-lib: OS command execution through crafted SCM contents

A flaw was found in Jenkins. The JenkinsPipeline: Shared Groovy Libraries uses the same checkout directories for distinct SCMs for Pipeline libraries. This flaw allows attackers with item/configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents. This...

8.8CVSS5.9AI score0.01421EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.4 views

Vulnerabilities of Microsoft 365, Microsoft Excel, Microsoft Office, Microsoft SharePoint, and Microsoft Office Web Apps are related to improper code generation, allowing attackers to execute arbitrary code.

Vulnerabilities of Microsoft 365, Microsoft Excel, Microsoft Office, Microsoft SharePoint, and Microsoft Office Web Apps are related to improper code generation management. Exploitation of these vulnerabilities can allow a malicious actor to execute arbitrary code remotely...

9.3CVSS8.5AI score0.03115EPSS
Exploits0References3
CNVD
CNVD
added 2021/12/25 12:0 a.m.12 views

Command Execution Vulnerability in GitLab

GitLab is developed by GitLab Inc. is an open source project for warehouse management system , using Git as a code management tool , can be accessed through the Web interface to public or private projects . GitLab suffers from a command execution vulnerability that can be exploited by an attacker...

7.6AI score
Exploits0
CNVD
CNVD
added 2021/12/17 12:0 a.m.13 views

Enalean Tuleap SQL Injection Vulnerability (CNVD-2021-103507)

Enalean Tuleap is a set of open source software development and project management tools from the French company Enalean. The tool provides enterprise application lifecycle management, as well as project tracking, source code management and team collaboration.Enalean Tuleap is vulnerable to SQL...

8.8CVSS3AI score0.01544EPSS
Exploits0References1
CNVD
CNVD
added 2021/12/17 12:0 a.m.10 views

Enalean Tuleap Injection Vulnerability

Enalean Tuleap is a set of open source software development and project management tools from the French company Enalean. The tool provides enterprise application lifecycle management, as well as project tracking, source code management, and team collaboration.Enalean Tuleap suffers from an...

7.2CVSS1.7AI score0.01398EPSS
Exploits0References1
CNVD
CNVD
added 2021/05/31 12:0 a.m.3 views

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-41723)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve work efficiency, access to more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit the...

7.8AI score
Exploits0
CNVD
CNVD
added 2021/05/31 12:0 a.m.2 views

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-41722)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve work efficiency, access to more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers ...

7.8AI score
Exploits0
CNVD
CNVD
added 2021/05/31 12:0 a.m.2 views

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Generation System (CNVD-2021-41721)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers to obtain...

7.8AI score
Exploits0
CNVD
CNVD
added 2021/05/30 12:0 a.m.1 views

SQL Injection Vulnerability in Ricochet Cloud Group Code Management System

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit this vulnerability to...

7.8AI score
Exploits0
CNVD
CNVD
added 2021/05/30 12:0 a.m.2 views

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-40237)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit this vulnerability to...

7.8AI score
Exploits0
CNVD
CNVD
added 2021/05/30 12:0 a.m.3 views

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-40236)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit this vulnerability to...

7.8AI score
Exploits0
CNVD
CNVD
added 2021/05/30 12:0 a.m.3 views

SQL Injection Vulnerability in Ricochet Cloud's WeChat Live Code Management System

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the RikCloud WeChat Live Code Management System. An attacker can exploit this vulnerability to...

8AI score
Exploits0
CNVD
CNVD
added 2021/04/15 12:0 a.m.2 views

Ricochet Cloud WeChat Live Code Management System Has a Universal Password Vulnerability

Rikkun shares cracked software, free activities, limited time activities, traffic, toll activities, cracking technology, development technology, source code, integrated Internet resources, learning resources, film and television resources, music resources, picture resources, and Android, iOS...

6.9AI score
Exploits0
RustSec
RustSec
added 2020/11/02 12:0 p.m.16 views

crate has been renamed to `sn_routing`

This crate has been renamed from routing to snrouting. The new repository location is:...

6.9AI score
Exploits0
Akamai Blog
Akamai Blog
added 2020/06/19 7:15 p.m.23 views

DNS as Code

Infrastructure as Code IaC and Continuous Delivery methods have become increasingly popular amongst development and operations teams as a means of maintaining high-performing websites. Code repositories, build servers, and configuration management systems are now industry standards, as these tool...

0.3AI score
Exploits0
Rows per page
Query Builder