PT-2023-31642 · Jenkins · Jenkins Dingding Json Pusher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dingding JSON Pusher Plugin versions 2.0 and earlier Description: The issue concerns the Jenkins Dingding JSON Pusher Plugin, where access tokens are not masked on the job configuration form. This increases the potential for attackers...

CVE-2022-21667

soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...

Design/Logic Flaw

soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...

CVE-2022-21667 Denial of Service in soketi

soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...

CVE-2020-18684

Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number...

CVE-2020-18683

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling...

Floodlight 输入验证错误漏洞

Floodlight is a leading open source OpenFlow controller. An input validation error vulnerability exists in Floodlight version 1.2, which stems from the software having poor input validation in the checkFlow in StaticFlowEntryPusherResource.java, as there is no checking of prerequisites related to...

Command Execution Vulnerability in Coupon Pusher CMS

Push Couponer CMS is a completely free Taobao coupon website source code program. A command execution vulnerability exists in Push Couponer CMS, which can be exploited by attackers to execute malicious code...

Coupon Pusher CMS suffers from XSS vulnerability (CNVD-2020-26263)

Push Couponer CMS is a PHP Taobao coupon website system developed by PHP+MySQL. Push Coupon CMS has an XSS vulnerability that can be exploited by attackers to execute malicious scripts and obtain administrator cookies...

Coupon Pusher CMS suffers from XSS vulnerability

Push Couponer CMS is a completely free Taobao coupon website source code program, can automatically collect goods with coupons, automatically apply for high commission plan. Push Couponer CMS has an XSS vulnerability that can be exploited by attackers to obtain administrator cookies...

Coupon Pusher CMS suffers from arbitrary file download vulnerability

Push Couponer CMS is a completely free Taobao coupon website source code program, can automatically collect goods with coupons, automatically apply for high commission plan. Push Couponer CMS has an arbitrary file download vulnerability that can be exploited by attackers to cause directory and fi...

Chameleon Coin Pusher - Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chameleon Coin Pusher - Free published at the 'play' market has multiple vulnerabilities...

Coin Stars: Slots Pusher! - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Stars: Slots Pusher! published at the 'play' market has multiple vulnerabilities...

Pharaoh's Party: Coin Pusher - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pharaoh's Party: Coin Pusher published at the 'play' market has multiple vulnerabilities...

Coin Party: Carnival Pusher - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Party: Carnival Pusher published at the 'play' market has multiple vulnerabilities...

Coinbase: Transactions visible on Unconfirmed devices

Pusher authentication did not take device confirmation into account. This would allow an attacker with a valid session but an unconfirmed device to snoop on pusher updates like incoming transactions. This issue was in the coinbase event notification Pusher, which allowed me to read notification o...

CVE-2012-5813

The CVE-2012-5813 entry concerns the Android_Pusher library for Android where TLS hostname verification is not performed against the server certificate’s CN/subjectAltName. This omission enables man-in-the-middle attackers to spoof SSL servers using an arbitrary valid certificate. The available s...