lighthouse

Lighthouse - A Coverage Explorer for Reverse Engineers Overview Lighthouse is a powerful code coverage explorer for IDA Pro and Binary Ninja, providing software researchers with uniquely interactive controls to study execution maps for native applications without requiring symbols or source. This...

CVE-2026-92138

The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the oauthcallback URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack the OAuth flow and obtain an access token on behalf of the vict...

CVE-2026-92138

The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the oauthcallback URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack the OAuth flow and obtain an access token on behalf of the vict...

CVE-2026-92138

The Jenkins Bitbucket Server Integration Plugin (atlassian-bitbucket-server-integration) versions 6.0.1 and earlier is vulnerable to an OAuth access token hijacking flaw. The OAuth authorization endpoint incorrectly reads the oauth_callback URL from the submitted form instead of using the server-...

EUVD-2026-80762

The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the oauthcallback URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack the OAuth flow and obtain an access token on behalf of the vict...

io.jenkins.plugins:bitbucket-kubernetes-credentials (>=202.v15b_72a_698524, <=662.v96d8b_a_90e07e) potentially affected by CVE-2026-92138 via io.jenkins.plugins:atlassian-bitbucket-server-integration (>=3.4.2, <=6.0.0)

io.jenkins.plugins:atlassian-bitbucket-server-integration MAVEN version =3.4.2, =202.v15b72a698524, =662.v96d8ba90e07e Source cves: CVE-2026-92138 Source advisory: MEND:CVE-2026-92138...

CVE-2026-92138

The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the oauthcallback URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack the OAuth flow and obtain an access token on behalf of the vict...

CVE-2026-92138: Insufficient Verification of Data Authenticity

The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the oauthcallback URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack the OAuth flow and obtain an access token on behalf of the vict...

PT-2026-93781

Name of the Vulnerable Software and Affected Versions Jenkins Bitbucket Server Integration Plugin versions prior to 6.0.2 Description The OAuth authorization endpoint reads the oauth callback URL from the submitted form instead of using the server-side stored request token. This flaw allows...

OAuth access token hijacking via callback URL manipulation in atlassian-bitbucket-server-integration

atlassian-bitbucket-server-integration implements an OAuth provider for Bitbucket Server. The OAuth authorization endpoint in atlassian-bitbucket-server-integration 6.0.1 and earlier reads the oauthcallback URL from the submitted form rather than from the server-side stored request token. An...

com.themodernway:themodernway-server-integration (>=1.3.6-release, <=1.3.7-release), org.springframework.cloud:spring-cloud-dataflow-server-cloudfoundry (>=1.5.0.release, <=1.5.1.release) +4 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.15.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.themodernway:themodernway-server-integration (>=1.2.30-release, <=1.3.4-release), org.springframework.integration:spring-integration-ftp (4.3.13.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.13.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

[SECURITY] Fedora 44 Update: goose-1.23.2-8.fc44

Goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously...

Clam AntiVirus Toolkit 1.5.2

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...

EUVD-2025-0187

Malicious code in bioql PyPI...

[SECURITY] Fedora 41 Update: clamav-1.0.9-1.fc41

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

org.infinispan:infinispan-server-integration (13.0.12.final), org.infinispan:infinispan-server-integrationtests-commons (13.0.12.final) +5 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (13.0.12.final)

org.infinispan:infinispan-cli-client MAVEN version 13.0.12.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 13.0.12.final -...

org.infinispan:infinispan-server-integration (13.0.14.final), org.infinispan:infinispan-server-integrationtests-commons (13.0.14.final) +5 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (13.0.14.final)

org.infinispan:infinispan-cli-client MAVEN version 13.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 13.0.14.final -...

org.infinispan:infinispan-quarkus-cli (15.1.0.final), org.infinispan:infinispan-server-integration (15.1.0.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.1.0.final)

org.infinispan:infinispan-cli-client MAVEN version 15.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.1.0.final -...

org.infinispan:infinispan-quarkus-cli (15.1.0.dev05), org.infinispan:infinispan-server-integration (15.1.0.dev05) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.1.0.dev05)

org.infinispan:infinispan-cli-client MAVEN version 15.1.0.dev05 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.1.0.dev05 -...