6 matches found
CVE-2025-26399
CVE-2025-26399 이 탐지 방법은 어떻게 작동하나요? 이 스크립트는 SolarWinds Web Help Desk 인스턴스에서 CVE-2025-26399에 취약한지 탐지합니다. Helpdesk 로그인 페이지를 요청하고, 응답에서 제품 식별자를 확인하며, 포함된 빌드 토큰을 버전 문자열로 추출한 다음 12.8.7.0보다 낮은 버전을 실행 중인 시스템을 플래그로 표시합니다. 이 스크립트를 어떻게 실행하나요? 1. 여기에서 Nuclei를 다운로드하세요. 2. 템플릿을 로컬 시스템에 복사하세요. 3. 다음 명령을 실행하세요:...
GHSA-HXJG-2JVF-H3RX Jenkins's build authorization token is stored and displayed in plain text
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...
Jenkins's build authorization token is stored and displayed in plain text
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...
Jenkins 安全漏洞
Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins 2.540 and earlier and LTS 2.528.2 and earlier, which stems from an unmasked bui...
Npm Package Targeting GitHub-Owned Repositories Flagged as Red Team Exercise
Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate "@actions/artifact" package with the intent to target GitHub-owned repositories. "We think the intent was to have this script execute during a build of a GitHub-owned...
