Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-3470

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00412EPSS
Exploits0References5
CNVD
CNVD
added 2020/06/04 12:0 a.m.1 views

CloudBees Jenkins Self-Organizing Swarm Plug-in Modules Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks.Self-Organizing Swarm Plug-in Modules Plugin is a plug-in that supports the...

6.5CVSS6.9AI score0.00412EPSS
Exploits0References1
OSV
OSV
added 2020/06/03 1:15 p.m.14 views

CVE-2020-2192

A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels...

6.5CVSS6.9AI score
Exploits0References2
NVD
NVD
added 2020/06/03 1:15 p.m.10 views

CVE-2020-2192

A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels...

6.5CVSS6.3AI score0.00412EPSS
Exploits0References2
CVE
CVE
added 2020/06/03 12:40 p.m.68 views

CVE-2020-2192

The CVE-2020-2192 entry covers a CSRF vulnerability in Jenkins Swarm Plugin (Self-Organizing Swarm Plug-in Modules) up to version 3.20. The issue arises because the plugin exposes API endpoints that add or remove agent labels and, in 3.20 and earlier, do not perform regular permission checks or r...

6.5CVSS6.3AI score0.00412EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/04/30 12:25 p.m.51 views

CVE-2019-10309

The CVE-2019-10309 entry concerns the Jenkins Swarm Plugin (Swarm Client) where UDP-based master discovery responses are XML documents that are parsed without proper XXE protection. This XXE flaw could allow an unauthenticated attacker on the same network to read arbitrary files from Swarm client...

9.3CVSS9AI score0.00068EPSS
Exploits0References4Affected Software1
Kitploit
Kitploit
added 2018/11/17 1:13 p.m.75 views

Pacu - The AWS Exploitation Framework, Designed For Testing The Security Of Amazon Web Services Environments

Pacu is an open source AWS exploitation framework, designed for offensive security testing against cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account, using modules to easily expand its...

7.5AI score
Exploits0References7
n0where
n0where
added 2018/11/08 3:21 a.m.94 views

The AWS Exploitation Framework: Pacu

Pacu is an open source AWS exploitation framework, designed for offensive security testing against cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account, using modules to easily expand its...

0.8AI score
Exploits0References2
Rows per page
Query Builder