vulhub

This is a collection of vulnerable web applications and tools for testing and learning about web application security. The repository contains a variety of applications, including CouchDB, FFmpeg, Git, and Jenkins, each with its own set of vulnerabilities. The applications are designed to be used...

GHSA-8847-XVJW-9G43 XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin

OSF Builder Suite : : XML Linter 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control XML files that get processed by the 'OSF Builder Suite : : XML Linter' build step to have agent processes parse a crafted file tha...

XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin

OSF Builder Suite : : XML Linter 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control XML files that get processed by the 'OSF Builder Suite : : XML Linter' build step to have agent processes parse a crafted file tha...

CVE-2022-45397

Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-45397

Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

Xxe

Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

XXE vulnerability on agents in OSF Builder Suite : : XML Linter

OSF Builder Suite : : XML Linter 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control XML files that get processed by the 'OSF Builder Suite : : XML Linter' build step to have agent processes parse a crafted file tha...

CVE-2022-45397

CVE-2022-45397 : Jenkins OSF Builder Suite — XML Linter Plugin (versions 1.0.2 and earlier) is vulnerable to XML External Entity (XXE) attacks because the plugin’s XML parser is not configured to disable external entities. This allows an attacker who can control XML input processed by the OSF Bui...

CVE-2022-45397

Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-45397

Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-45397

Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-45397: Improper Restriction of XML External Entity Reference

Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

PT-2022-27499 · Jenkins · Jenkins Osf Builder Suite : : Xml Linter Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OSF Builder Suite : : XML Linter Plugin versions 1.0.2 and earlier Description: The issue arises from the XML parser not being configured to prevent XML external entity XXE attacks. This allows attackers who can control XML files...

Jenkins Plugin OSF Builder Suite :: XML Linter Code Issues and Vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin A code issu...

Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-golangci-lint-1-0-0.5.20200828gitd2cdd8c.fc35

Fork of the official Go linter with API enhancements...

[SECURITY] Fedora 36 Update: golang-x-lint-0-16.20210123git83fdc39.fc36

Golint is a linter for Go source code...

[SECURITY] Fedora 36 Update: golang-github-golangci-lint-1-0-0.5.20200828gitd2cdd8c.fc36

Fork of the official Go linter with API enhancements...

Malicious Package

Overview linter-marlint is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious code in gitlab-linter-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af7560e40117ccc050a151ffed6a4424e875cff52e8d682ca0f239ba82a4d925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...