Design/Logic Flaw

An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in SonarInstallation.java that allows attackers with local file system access to obtain the credentials used to connect to SonarQube...

CVE-2018-1000425

The CVE concerns the Jenkins SonarQube Scanner Plugin (up to version 2.8) where credentials used to connect to SonarQube are stored in plaintext in SonarInstallation.java. This insufficient protection allows an attacker with local filesystem access to extract the server authentication credentials...

CVE-2018-1000425

An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in SonarInstallation.java that allows attackers with local file system access to obtain the credentials used to connect to SonarQube...

CloudBees Jenkins Anchore Container Image Scanner Plugin Information Disclosure Vulnerability

CloudBees Jenkins is a set of Java-based continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Anchore Container Image Scanner Plugin is used in which a container inspection and...

Clockstone and other CMSMasters Theme File Upload Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Clockstone and Various other CMSMasters Theme File Upload Vulnerabilities Google Dork: "wp-content/themes/clockstone" Date: 12/18/2012 Exploit Author: DigiP Vendor Homepage: http://cmsmasters.net/ Software Link:...