jenkins_scan

jenkinsscan 查找 Jenkins 环境并检查 CVE-2024-23897 工作原理 Jenkins 检测 测试路径：/、/login、/oops、/api/json、/cli、/jenkins/、/jenkins/api/json 通过以下方式识别： 1. Header X-Jenkins — 最可靠，同时返回版本 2. Header X-Hudson — 旧版本实例 3. HTML 正文 — 类似 "login to jenkins"、"hudson.model" 等字符串 4. /api/json — 通过 JSON 结构（class、jobs、views）确认...

EUVD-2014-3614

Malware in sbrugna...

Jenkins allows for Code Execution via Crafted Packet to the CLI

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

Arbitrary Code Execution

jenkins is vulnerable to arbitrary code execution. The vulnerability exists through the CLI channel...

jenkins: remote code execution flaw (SECURITY-150)

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

Code injection

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

CVE-2014-3666

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

CVE-2014-3666

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...