CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

Jenkins is an open source automation server. It helps automate the parts of software development related to building, testing, and deploying, facilitating continuous integration, and continuous delivery. CVE-2024-23897Arbitrary File Read Vulnerability Jenkins 2.441 and earlier, LTS 2.426.2 and...

CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controll...

CVE-2024-23897

CVE-2024-23897 Because of a misconfiguration of a default option in the CLI command parser, a attacker can read arbitrary files Summary of the CVE Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a...

PoC-Fix-jenkins-rce_CVE-2024-23897

PoC-jenkins-rceCVE-2024-23897. En este git puedes encontrar toda la información sobre la CVE-2024-23897. Introducción El problema, asignado con el identificador CVE-2024-23897, ha sido descrito como una vulnerabilidad de lectura arbitraria de archivos a través de la interfaz de línea de comandos...

TencentOS Server 2: freerdp (TSSA-2026:1042)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1042 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

The vulnerability of the read_cli_parser_preference() function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.

The vulnerability of the readcli parserpreference function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark is related to the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

EUVD-2018-0999

Malware in sbrugna...

EUVD-2018-1304

Malware in sbrugna...

EUVD-2018-1008

Malware in sbrugna...

EUVD-2020-24748

Malware in sbrugna...

EUVD-2018-7246

Malware in sbrugna...

EUVD-2015-4260

Malware in sbrugna...

EUVD-2018-1007

Malware in sbrugna...

EUVD-2018-1300

Malware in sbrugna...

EUVD-2018-1017

Malware in sbrugna...

EUVD-2017-3912

Malware in sbrugna...

EUVD-2021-6595

Malicious code in bioql PyPI...

BIT-JENKINS-2024-23897

Jenkins LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...

CVE-2024-23897

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...

Cisco NX-OS Software CLI Arbitrary Command Execution (CVE-2018-0306)

A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by...