Jenkins 安全漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins versions 2.335 through 2.355 contain an access control error vulnerability that stems from the lack of an effectiv...

CVE-2022-34182

Jenkins Nested View Plugin 1.20 through 1.25 both inclusive does not escape search parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2022-34182

CVE-2022-34182 affects Jenkins Nested View Plugin, versions 1.20–1.25. The vulnerability is a reflected cross-site scripting (XSS) due to the plugin not escaping search parameters in user input. The issue is addressed in version 1.26, which escapes search parameters. Therefore, upgrading to 1.26+...

7-Zip gets Mark of the Web feature, increases protection for users

One of the most popular zip programs around, 7-Zip, now offers support for "Mark of the Web" MOTW, which gives users better protection from malicious files. This is good news. But what does that actually mean? In the bad old days, opening up a downloaded document could be a fraught exercise...

Jenkins Plugin Agent Server Parameter 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application software.A cross-site scripting...

PT-2022-22042 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.335 through 2.355 Description: The issue allows attackers in some cases to bypass a protection mechanism, directly accessing view fragments containing sensitive information and bypassing permission checks in the correspondi...

PT-2022-22050 · Jenkins · Jenkins Nested View Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Nested View Plugin versions 1.20 through 1.25 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This occurs because the plugin does not escape search parameters. No information is provided about...

Jenkins Plugin Nested View 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. An attacker could exploit this vulnerability to perform cross-site scripting...

CVE-2022-33048

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/viewdetails.php...

Sql injection

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/viewdetails.php...

CVE-2022-31373

SolarView Compact v6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component SolarAiConf.php...

Online Discussion Forum Site SQL注入漏洞（ CNVD-2022-58959 ）

Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum, Online Discussion Forum Site is vulnerable to a SQL injection vulnerability in /odfs/posts/viewpost.php that lacks validation of externally entered SQL statements. An attacker could use this vulnerabilit...

Online Railway Reservation system SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerabilit...

MAL-2022-6412 Malicious code in taf-three-dimensional-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3019ee1a4da6ba81d0721c4cccfd580bc1f3a9f6aeba72ec8270c591dbfc6a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3724 Malicious code in huobi-trading-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d29ecae36ab585836b991b6bbef49b053752417c2479bc2f7b6d086b2217b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in huobi-trading-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d29ecae36ab585836b991b6bbef49b053752417c2479bc2f7b6d086b2217b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in huobi-trading-view-swap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4131800be5001915a56dd3db46bfe0a0b883eaa15801e0160afa68fc41fe30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3725 Malicious code in huobi-trading-view-swap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4131800be5001915a56dd3db46bfe0a0b883eaa15801e0160afa68fc41fe30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitui-view-hovercards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec3479905c08bdd96b7f18218ceaaa3497f5b942ecb0a9f9ab4fa9eab70b0f78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4636 Malicious code in mitui-view-hovercards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec3479905c08bdd96b7f18218ceaaa3497f5b942ecb0a9f9ab4fa9eab70b0f78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...