364 matches found
org.jenkins-ci.plugins:git (>=2.2.11, <=2.3.4), org.jenkins-ci.plugins:github-pullrequest (>=0.0.1-beta7, <=0.0.1-beta12) +2 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.15.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.2.11, =0.0.1-beta7, =0.4.0, =1.0, =1.3 Source cves:...
org.jenkins-ci.plugins:git (2.3.1), org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28) +2 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.12.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.3.1 - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0,...
org.jenkins-ci.plugins:git (2.5.0-beta1) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.20.0-beta1)
org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.5.0-beta1 Source cves: CVE-2017-1000242 Source advisory:...
com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1), org.jenkins-ci.plugins:git (1.2.0) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.0.2)
org.jenkins-ci.plugins:git-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 -...
org.jenkins-ci.plugins:git (>=2.5.0-beta4, <=2.5.0-beta5) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.20.0-beta3)
org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.5.0-beta4, =2.5.0-beta5 Source cves: CVE-2017-1000242...
org.jenkins-ci.plugins:git (1.6.0-beta-1) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.2.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 1.6.0-beta-1 Source cves: CVE-2017-1000242 Source advisory:...
org.jenkins-ci.plugins:git (>=2.2.6, <=2.3-beta-3), org.jenkins-ci.plugins:git-tag-message (>=1.0, <=1.5) +1 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.10.2)
org.jenkins-ci.plugins:git-client MAVEN version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.2.6, =1.0, =0.1-beta-3, =0.1-beta-8 Source cves:...
com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +5 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.4.4)
org.jenkins-ci.plugins:git-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.8, =1.4.0, =1.4.2 Source...
org.jenkins-ci.plugins.nodesharing:node-sharing-executor (>=2.0.0, <=2.0.3), org.jenkins-ci.plugins.nodesharing:node-sharing-lib (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.17.1)
org.jenkins-ci.plugins:git-client MAVEN version 1.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.nodesharing:node-sharing-executor =2.0.0, =2.0.0, =2.0.0, =2.0.0,...
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.biouno:uno-choice (>=1.5-alpha-1, <=1.5.3) +16 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.11.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.5-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...
Metasploit Wrap-Up
Capture Credentials with our new SMB Server Our own Adam Galway revamped the old SMB capture module and now supports NTLMv1 and NTLMv2, as well as SMB1, SMB2 and SMB3. This was possible thanks to @zeroSteiner's new RubySMB server implementation. Metasploit is now able to capture NTLM hashes from...
CVE-2019-10392
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...
jenkins-git-client-plugin: OS command injection via 'git ls-remote'
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...
Git Submodules Directory Traversal (CVE-2018-11235)
A directory traversal vulnerability exists in the Git client. The vulnerability is due to insufficient validation of submodule names in the .gitmodules file during checkout. Successful exploitation of this vulnerability could enable the attacker to execute arbitrary scripts on the target system...
jenkins-git-client-plugin: OS command injection via 'git ls-remote'
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...
Exploit for OS Command Injection in Jenkins Git_Client
CVE-2019-10392EXP Jenkins Git Client Authenticated RCE CVE-20...
Jenkins Git Client Plugin Remote Code Execution (CVE-2019-10392)
A remote code execution vulnerability exists in Jenkins Git Client Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Jenkins Git client plugin command execution vulnerability
Jenkins is an open source software project , is based on Java development of a continuous integration tool . Git client plug-in for Jenkins plug-in provides git application programming interface . Jenkins Git client plug-in has a command execution vulnerability , with Job/Configure privileges of...
