CVE-2019-1003060

CVE-2019-1003060 affects the Jenkins Official OWASP ZAP Plugin. The issue is that credentials are stored in plaintext in the plugin’s global configuration file (org.jenkinsci.plugins.zap.ZAPBuilder.xml) on the Jenkins controller/master, allowing any user with access to the master filesystem to vi...

Faraday v3.3 - Collaborative Penetration Test and Vulnerability Management Platform

Here’s the main new features and improvements in Faraday v3.3: Workspace archive You are now able to make the whole workspace read only and archive it for future use. This allows to clear the clutter from all your ongoing projects while giving you the opportunity to continue with your work later ...

Retire.Js - Scanner Detecting The Use Of JavaScript Libraries With Known Vulnerabilities

What you require you must also retire There is a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development,but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10...