CVE-2024-23897

CVE-2024-23897 — 支持 HTTPS + CSRF-crumb 的 PoC cve-2024-23897-crumb.py — 针对 Jenkins file --http --port N python3 cve-2024-23897-crumb.py jenkins.example.com python3 cve-2024-23897-crumb.py jenkins.example.com /etc/shells python3 cve-2024-23897-crumb.py 10.0.0.5 /etc/passwd --http --port 8080 仅依赖...

CVE-2026-84651

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure...

PT-2020-7566 · D Link · D-Link Dir-100

Name of the Vulnerable Software and Affected Versions: D-Link DIR-100 version 4.03B07 Description: The issue concerns a CSRF vulnerability in the cli.cgi endpoint. Recommendations: For D-Link DIR-100 version 4.03B07, consider restricting access to the cli.cgi endpoint as a temporary workaround...