65 matches found
AWS-Threat-Simulation-and-Detection
使用 Stratus Red Team 进行 AWS 威胁检测 本仓库记录了我使用 Stratus Red Team 进行云环境对手模拟的实践经历。 Stratus Red Team 是“云上的 Atomic Red Team”，能够以细粒度且自包含的方式模拟攻击技术。 我们在 AWS 账户中逐一执行 Stratus Red Team 仓库中涵盖的攻击。为了监控这些攻击，我们将使用 CloudTrail 和 CloudWatch 进行日志记录，并将这些日志导入 SumoLogic 进行进一步分析。 攻击| 描述| 链接 ---|---|---...
Astra Linux – Vulnerability in Ansible
Ansible versions 2.9.x before 2.9.1, 2.8.x before 2.8.7, and 2.7.x before 2.7.15 do not respect the “nolog” flag set to True when using Sumologic and Splunk callback plugins to send task result events to collectors. This could lead to the disclosure and collection of sensitive data...
EUVD-2023-1991
Malicious code in bioql PyPI...
EUVD-2023-2105
Malicious code in bioql PyPI...
CVE-2023-37958
A cross-site request forgery CSRF vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL...
GHSA-MX84-FRHW-PCG8 Jenkins Sumologic Publisher Plugin missing permission check
Jenkins Sumologic Publisher Plugin 2.2.1 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this form validation method does not require POST requests,...
Jenkins Sumologic Publisher Plugin missing permission check
Jenkins Sumologic Publisher Plugin 2.2.1 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this form validation method does not require POST requests,...
GHSA-7JRR-FWHW-762V Jenkins Sumologic Publisher Plugin vulnerable to cross-site request forgery
Jenkins Sumologic Publisher Plugin 2.2.1 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this form validation method does not require POST requests,...
Jenkins Sumologic Publisher Plugin vulnerable to cross-site request forgery
Jenkins Sumologic Publisher Plugin 2.2.1 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this form validation method does not require POST requests,...
CVE-2023-37958
A cross-site request forgery CSRF vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL...
CVE-2023-37959
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2023-37958
A cross-site request forgery CSRF vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL...
CVE-2023-37959
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
Information disclosure
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
Cross site request forgery (csrf)
A cross-site request forgery CSRF vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL...
CVE-2023-37959
CVE-2023-37959 affects Jenkins Sumologic Publisher Plugin (versions 2.2.1 and earlier). The root cause is a missing permission check in a form-validation method, enabling attackers with Overall/Read permission to connect to an attacker-specified URL. Some sources additionally describe CSRF risk b...
CVE-2023-37959
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2023-37959
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2023-37958
Jenkins Sumologic Publisher Plugin ≤ 2.2.1 has a CSRF vulnerability: a method implementing form validation lacks a permission check, allowing attackers with Overall/Read to trigger a request to an attacker‑specified URL without POST requirements. Impact stated across multiple sources; no public e...