PT-2022-22070 · Jenkins · Jenkins Convertigo Mobile Platform Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Convertigo Mobile Platform Plugin versions 1.1 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified URL. Recommendations: For Jenkins Convertigo Mobile Platform Plugin versio...

Jenkins Plugin Convertigo Mobile Platform 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. The vulnerability stems from a failure to perform permission checks in the...

Mitigate Ransomware in a Remote-First World

Ransomware has been a thorn in the side of cybersecurity teams for years. With the move to remote and hybrid work, this insidious threat has become even more of a challenge for organizations everywhere. 2021 was a case study in ransomware due to the wide variety of attacks, significant financial...

Hyland Onbase Application Server 安全漏洞

Hyland Onbase Application Server is an enterprise information platform server from Hyland USA. Designed to manage content, processes and cases. A security vulnerability exists in Hyland Onbase Application Server versions prior to 20.3.58.1000 and Onbase versions 21.1.1.1000 through 21.1.15.1000. ...

Malicious code in mattermost-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 559bbd230a61f27a67472272f7ad0d54492d8e9f0fe8245c3c67aa9987efd1d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4500 Malicious code in mattermost-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 559bbd230a61f27a67472272f7ad0d54492d8e9f0fe8245c3c67aa9987efd1d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mattermost-mobile-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1307116dedf590909799162cf8b3c892665ef1f1e6c9301aa3ae7c7dae92e04f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4501 Malicious code in mattermost-mobile-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1307116dedf590909799162cf8b3c892665ef1f1e6c9301aa3ae7c7dae92e04f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1575 Malicious code in billpay-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a759527abbcec42ad5ff8cf7e6895167d38072691372ff862df1d4b9e38373b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in billpay-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a759527abbcec42ad5ff8cf7e6895167d38072691372ff862df1d4b9e38373b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mobile-guild-kb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5411acc8e88aa97cb7acff34873c8baf6b92d02bd87cd23292294dae6a232ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4651 Malicious code in mobile-guild-kb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5411acc8e88aa97cb7acff34873c8baf6b92d02bd87cd23292294dae6a232ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shineout-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 464fcb75d15a9834db9381502bb0698a424a9423127dc465313aaf6e27b9bbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in statusim-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bd2cb491732cf09ea01c6998ed53b9bbe6e617f6dc92f745da1298a8b0da6c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-pokemon-go-spoofer-ios-apk-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0db129f987cd3dc788ee2d248495349ba7c3cae85e9f80507bfdfc9ca48f91e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7111 Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nightingale - Docker Environment For Pentesting Which Having All The Required Tool For VAPT

In today's technological era, docker is the most powerful technology in each and every domain, whether it is Development, cyber security, DevOps, Automation, or Infrastructure. Considering the demand of the industry, I would like to introduce my idea to create a NIGHTINGALE: docker image for...

mobilehomeclassifieds.com Cross Site Scripting vulnerability OBB-2653709

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Samsung SmartThings PendingIntent Hijacking Vulnerability

SmartThings is a powerful Samsung smart home mobile app. A PendingIntent hijacking vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. An unauthorized local attacker can exploit the vulnerability to access files via an implicit Intent...