CVE-2020-2151

Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2020-2150

Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2020-2150

Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2020-2151

Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

Design/Logic Flaw

Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

Design/Logic Flaw

Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2020-2151

Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2020-2151

CVE-2020-2151 affects Jenkins Quality Gates Plugin versions 2.5 and earlier. The root cause is that credentials configured in the plugin’s global Jenkins configuration form are transmitted in plain text, potentially exposing them (e.g., via browser extensions or similar vectors). Impact stated as...

CVE-2020-2150

Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2020-2150

CVE-2020-2150 affects Jenkins Sonar Quality Gates Plugin versions 1.3.1 and earlier. The issue arises because credentials are stored encrypted on disk in GlobalConfig.xml but transmitted in plain text via the plugin’s global configuration form, potentially exposing them (e.g., through browser ext...

PT-2020-15361 · Jenkins · Jenkins Sonar Quality Gates Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Sonar Quality Gates Plugin versions 1.3.1 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

PT-2020-15362 · Jenkins · Jenkins Quality Gates Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Quality Gates Plugin versions 2.5 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of the global Jenkins configuration form. This potentially results in their exposure. The...

CVE-2019-18425

A flaw was in Xen. Guest specified limits for descriptor table access, during PV guest operations, were found to not be enforced. An attacker with the ability to emulate 32-bit guest user mode calls through call gates, would be allowed to install and then use descriptors of their choice as long a...

Facebook Fixes Vulnerability That Led to Account Takeover, Pays Researcher $16K

Facebook quickly resolved a vulnerability in its Business Manager tool late last month that could have let an attacker take over any Facebook page. Arun Sureshkumar, a security researcher in India, disclosed the vulnerability Aug. 29; a member of Facebook’s security team, Neal Poole, informed him...

gates-online.com XSS vulnerability

Vulnerable URL: http://www.gates-online.com/GatesEU/pl/PL/adirect/gateu1?cmd=Automotivewebcat%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status...

Just One Device? No, Government wants Apple to Unlock 12 More iPhones

Until now, the FBI is asking for Apple's help in unlocking the iPhone belonging to one of the terrorists in the San Bernardino shootings that killed 14 and injured 24 in December. However, in addition to iPhone 5C belonged to San Bernardino shooter Syed Farook, the U.S. Justice Department is...

gatesfoundation.org XSS vulnerability

Vulnerable URL: http://www.gatesfoundation.org/searchq/k=%3Ajavascript%3A%2F--%3E%3C%2Ftitle%3E%3C%2Fstyle%3E%3C%2Ftextarea%3E%3C%2Fscript%3E%3C%2Fxmp%3E%3Csvg%2Fonload%3D%27%2B%2F%22%2F%2B%2Fonmouseover%3D1%2F%2B%2F%2F%2F%2Balert%28%2FXSSPOSED%2F%29%2F%2F%27%3E Details: Description| Value ---|--...

Hacker Who Stole Money From Bill Gates Arrested in Philippines

What if you get into the bank account of the World’s most richest person? Maybe it could be difficult for you as well as I. But not for this guy… ...Konstantin Simeonov Kavrakov, a Bulgarian hacker, who hacked into the ATM and stole thousands of dollars from the bank account of Microsoft mogul Bi...

Era Ends With Break Up of Trustworthy Computing Group at Microsoft

In a move that has surprised many in the security community, Microsoft has disbanded its Trustworthy Computing unit, the group that was responsible for the pioneering work that helped reverse the company’s security reputation and make Windows a much more secure and reliable computing platform. Th...

Syrian Electronic Army kept their promise; Microsoft's Office blog hacked

Yesterday Night Microsoft has faced another targeted attack by the Syrian Electronic Army SEA, a group supposed to be aligned with Syrian President Bashar al-Assad. The SEA group is popular for its advance phishing attack and using the same technique they also hacked into the Official Twitter...