PT-2025-26950

Name of the Vulnerable Software and Affected Versions: System Information Reporter SIR versions 1.0.3 and prior Description: A path traversal issue allows an authenticated, high-privileged user to send malicious ePO post requests, potentially creating files anywhere on the filesystem, overwriting...

Credentials stored in plain text by zephyr-for-jira-test-management

zephyr-for-jira-test-management 1.5 and earlier stores Jira credentials unencrypted in its global configuration file com.thed.zephyr.jenkins.reporter.ZfjReporter.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system. As of...

Acunetix Denial of Service Vulnerability

Acunetix is a Web application security scanner from Acunetix, Inc. that supports penetration testing, multi-threaded scanning, and client-side script analysis, among other security features. A denial of service vulnerability exists in the Reporter.exe file in Acunetix version 8. A remote attacker...