Cross-site Request Forgery (CSRF)

Overview org.jenkins-ci.plugins:nexus-task-runner is a This plugin executes Sonatype Nexus scheduled tasks after your build. For example, if you want to refresh your Nexus's repositories index after building your project, you can use execute a Nexus task whose type is "Publish index" using this...

Jenkins Themis Plugin vulnerable to cross-site request forgery

Jenkins Themis Plugin 1.4.1 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery CSRF...

EUVD-2019-3139

Malware in sbrugna...

EUVD-2021-0816

Malware in sbrugna...

EUVD-2021-1415

Malware in sbrugna...

EUVD-2020-18299

Malware in sbrugna...

EUVD-2025-15648

Malicious code in bioql PyPI...

EUVD-2025-20131

Malicious code in bioql PyPI...

EUVD-2023-29503

Malicious code in bioql PyPI...

EUVD-2022-5859

Malicious code in bioql PyPI...

EUVD-2023-44299

Malicious code in bioql PyPI...

EUVD-2022-2627

Malicious code in bioql PyPI...

EUVD-2023-44300

Malicious code in bioql PyPI...

EUVD-2022-3497

Malicious code in bioql PyPI...

EUVD-2022-5478

Malicious code in bioql PyPI...

EUVD-2023-1308

Malicious code in bioql PyPI...

EUVD-2022-6399

Malicious code in bioql PyPI...

EUVD-2022-46973

Malicious code in bioql PyPI...

CVE-2025-54782

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...

CVE-2025-7075

A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted upload. The attack needs to be done within...