6324 matches found
Credentials stored in plain text by tfs
tfs 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file hudson.plugins.tfs.TeamPluginGlobalConfig.xml on the Jenkins controller as part of its configuration. This secret can be viewed by attackers with access to the Jenkins controller file system. As of...
Malicious Package
fallguys is a malicious package. Malicious code within the library attempts to read local system files and exfiltrate information through a Discord webhook. The code attempts to access various files on Windows systems such as...
Malicious Package
Overview fallguys contained malicious code that attempted to read local sensitive files and exfiltrate information through a Discord webhook. The code attempted to access the following paths available on Windows systems: - /AppData/Local/Google/Chrome/User\x20Data/Default/Local\x20Storage/leveldb...
CVE-2020-12759
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook...
CVE-2020-12759
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook...
Cross site scripting
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook...
CVE-2020-12759
CVE-2020-12759 affects Zulip Server prior to 2.1.5, with a reflected XSS vulnerability via the Dropbox webhook. Public records across NVD/Red Hat OSV/CVE entries confirm the issue in Zulip Server before 2.1.5 and indicate the root cause as unsafe handling of the webhook payload leading to cross-s...
CVE-2020-12759
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook...
CVE-2020-12759
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook...
Zulip Server Cross-Site Scripting Vulnerability (CNVD-2020-49009)
Zulip is a powerful open source group chat application that combines the immediacy of live chat with the productivity benefits of threaded conversations.Zulip Server is the Zulip server. A reflective cross-site scripting vulnerability exists in Zulip Server versions prior to 2.1.5. An attacker ca...
PT-2020-13249
Name of the Vulnerable Software and Affected Versions Zulip Server versions prior to 2.1.5 Description The issue allows for reflected XSS via the Dropbox webhook. Recommendations For versions prior to 2.1.5, update to version 2.1.5 or later to resolve the issue...
CVE-2020-12759: Improper Neutralization of Input During Web Page Generation
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook...
Server-Side Request Forgery (SSRF)
github.com/goharbor/harbor is vulnerable to server-side request forgery SSRF. The vulnerability exists due to a legacy endpoint to test webhook, allowing an attacker with permissions to edit projects to perform a port scan of hosts within the internal network...
Atlassian Bitbucket Server Code Issue Vulnerability
Atlassian Bitbucket Server is a Git code hosting solution from Atlassian Australia. The solution is capable of managing and reviewing code with features such as diff view, JIRA integration and build integration. A security vulnerability exists in Webhooks in Atlassian Bitbucket Server versions...
Server side request forgery (ssrf)
Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via a Server-Side Request Forgery SSRF vulnerability...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-35445)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.5.0, prior to 4.4.5, and prior to 4.3.4, which stems from a failure of the program to properly handle the...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-41496)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server. An attacker could exploit this vulnerability to cause a denial of service memory consumption via an outgoing Webhook or slash command integratio...
CVE-2019-20888
An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service memory consumption via an outgoing webhook or a slash command integration...
CVE-2019-20888
An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service memory consumption via an outgoing webhook or a slash command integration...