CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

Jenkins es un servidor de automatización de código abierto. Ayuda a automatizar las partes del desarrollo de software relacionadas con la compilación, las pruebas y el despliegue, facilitando la integración continua y la entrega continua. CVE-2024-23897 Vulnerabilidad de lectura arbitraria de...

CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 y anteriores, LTS 2.426.2 y anteriores no deshabilitan una función de su analizador de comandos CLI que reemplaza un carácter '@' seguido de una ruta de archivo en un argumento con el contenido del archivo, permitiendo a atacantes no autenticados leer archivos...

CVE-2024-23897

CVE-2024-23897 Debido a una mala configuración de una opción predeterminada en el analizador de comandos CLI, un atacante puede leer archivos arbitrarios Resumen del CVE Jenkins 2.441 y anteriores, LTS 2.426.2 y anteriores no deshabilitan una característica de su analizador de comandos CLI que...

PoC-Fix-jenkins-rce_CVE-2024-23897

PoC-jenkins-rceCVE-2024-23897. En este git puedes encontrar toda la información sobre la CVE-2024-23897. Introducción El problema, asignado con el identificador CVE-2024-23897, ha sido descrito como una vulnerabilidad de lectura arbitraria de archivos a través de la interfaz de línea de comandos...

TencentOS Server 2: freerdp (TSSA-2026:1042)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1042 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

The vulnerability of the read_cli_parser_preference() function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.

The vulnerability of the readcli parserpreference function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark is related to the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

EUVD-2018-1304

Malware in sbrugna...

EUVD-2018-0999

Malware in sbrugna...

EUVD-2018-1008

Malware in sbrugna...

EUVD-2020-24748

Malware in sbrugna...

EUVD-2015-4260

Malware in sbrugna...

EUVD-2018-1300

Malware in sbrugna...

EUVD-2018-1007

Malware in sbrugna...

EUVD-2018-7246

Malware in sbrugna...

EUVD-2018-1017

Malware in sbrugna...

EUVD-2017-3912

Malware in sbrugna...

EUVD-2021-6595

Malicious code in bioql PyPI...

BIT-JENKINS-2024-23897

Jenkins LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...

CVE-2024-23897

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...

Cisco NX-OS Software CLI Arbitrary Command Execution (CVE-2018-0306)

A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by...