94 matches found
emba
EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...
MinimalReproducer
काफी प्रयासों के बाद, इसे एक न्यूनतम प्रतिकृति तक सीमित कर दिया गया। यह सिर्फ एक खाली प्रोजेक्ट है जो dependency-check-maven उपयोग के साथ समस्या को प्रदर्शित करने के लिए है, जिसे मैं अपनी कंपनी के नियमों के कारण करने के लिए मजबूर हूं। pom.xml जांचें और सत्यापित करें: mvn...
react2shell
React2Shell Vulnerability Checker Ubuntu Linux और Windows 10/11 के लिए CVE-2025-55182 डिटेक्शन टूल विवरण यह उपकरण React प्रोजेक्ट्स में React2Shell CVE-2025-55182 की संभावित भेद्यता का पता लगाता है, निम्नलिखित की जाँच करके: भेद्य पैकेटों के लिए package.json फ़ाइल और लॉक फ़ाइलें प्रभावित निर्भरताओ...
boot-jackson-cve
स्प्रिंग बूट 2.5.10 में CVE-2020-36518 का पुनरुत्पादन निष्पादित करें: ./mvnw clean verify यह निम्न त्रुटि के साथ विफल होगा: ERROR Failed to execute goal org.owasp:dependency-check-maven:7.0.0:check default on project jackson-demo: ERROR ERROR One or more dependencies were identified with...
heisenberg-ssc-gha
Heisenberg निर्भरता स्वास्थ्य जांच GitHub Action निर्भरता अद्यतनों के लिए एक हल्का PR गार्डरेल। यह केवल नई या बदली गई निर्भरताओं को स्कैन करता है आपके लॉक/मैनिफेस्ट से, स्वास्थ्य और जोखिम संकेत deps.dev + ह्यूरिस्टिक्स खींचता है, ताजा प्रकाशनों को फ्लैग करता है, PR पर एक रिपोर्ट टिप्पणी करता है,...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Jenkins UI when displaying CWE values from Dependency-Check reports. An attacker can execute arbitrary JavaScript code in the context of other users by injecting malicious content into the CWE values, whi...
CVE-2026-92136
Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2026-92136
Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2026-92136
The Jenkins OWASP Dependency-Check Plugin version 5.6.4 and earlier is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the failure to escape CWE values from Dependency-Check reports on the Jenkins UI. Attackers with Item/Configure permissions can exploit this to...
EUVD-2026-80760
Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2026-92136
Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
PT-2026-93779
Name of the Vulnerable Software and Affected Versions Jenkins OWASP Dependency-Check Plugin versions prior to 5.6.5 Description The Jenkins UI fails to escape CWE values from Dependency-Check reports, leading to a stored cross-site scripting XSS issue. This allows attackers with Item/Configure...
CVE-2026-92136: Improper Neutralization of Input During Web Page Generation
Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
Stored XSS vulnerability in dependency-check-jenkins-plugin
dependency-check-jenkins-plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. TIP: On Jenkins 2.539 and newer, LTS 2.541.1 and...
MINI-VJ4M-QX8Q-33HX
Bulletin has no description...
GO-2026-5746 vulnerabilities
Vulnerabilities for packages: zot, kubedock, spire-server-fips, upwind-agent, cloudbeat, nuclei, aws-otel-collector, chainloop-control-plane-fips, skopeo-fips, beats, amazon-cloudwatch-agent, buildah, harvester-fips, podman, trivy, kpt, skopeo, trivy-operator, kots, envoy-gateway-fips,...
GO-2026-5668 vulnerabilities
Vulnerabilities for packages: rancher-machine, amazon-cloudwatch-agent, osv-scanner, kots, podman, ko, amazon-cloudwatch-agent-operator, cri-tools, trivy, zot, grafana, nerdctl, undock, datadog-agent, docker-credential-gcr, rancher, kpt, opentelemetry-operator, buildah, nuclei, aws-otel-collector...
Malicious code in @wethenorth12/tronweb3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f34dbfde05ea1b80131dc35978c18b429f4ef11da06334e93c109db08c31f19 The package presents itself as a drop-in replacement for the legitimate tronweb SDK author field 'tronprotocol', README advertising tronweb...
MAL-2026-12105 Malicious code in @wethenorth12/tronweb3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f34dbfde05ea1b80131dc35978c18b429f4ef11da06334e93c109db08c31f19 The package presents itself as a drop-in replacement for the legitimate tronweb SDK author field 'tronprotocol', README advertising tronweb...