CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controll...

PoC-Fix-jenkins-rce_CVE-2024-23897

PoC-jenkins-rceCVE-2024-23897. On this git you can find all information on the CVE-2024-23897. Introduction The issue, assigned the CVE identifier CVE-2024-23897, has been described as an arbitrary file read vulnerability through the built-in command line interface. This command parser has a...

CVE-2024-23897

CVE-2024-23897 Because of a misconfiguration of a default option in the CLI command parser, a attacker can read arbitrary files Summary of the CVE Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a...

CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

Jenkins is an open source automation server. It helps automate the parts of software development related to building, testing, and deploying, facilitating continuous integration, and continuous delivery. CVE-2024-23897Arbitrary File Read Vulnerability Jenkins 2.441 and earlier, LTS 2.426.2 and...

TencentOS Server 2: freerdp (TSSA-2026:1042)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1042 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

curl: Stacked --proto modifiers leave denied protocol enabled

Summary proto2num line 431–447 consumes only one leading modifier character via a switch statement. The documentation says entries may be "prefixed by zero or more modifiers." Before commit 86ac471d, a loop consumed all modifiers. The replacement switch reads only the first character. --proto...

CVE-2026-64624: Improper Neutralization of Argument Delimiters in a Command

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass...

Wireshark read_cli_parser_preference Heap Buffer Overflow DoS

The vulnerability of the readcli parserpreference function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark is related to the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

EUVD-2020-24748

Malware in sbrugna...

EUVD-2018-1304

Malware in sbrugna...

EUVD-2018-1300

Malware in sbrugna...

EUVD-2018-1017

Malware in sbrugna...

EUVD-2018-1007

Malware in sbrugna...

EUVD-2018-0999

Malware in sbrugna...

EUVD-2018-7246

Malware in sbrugna...

EUVD-2017-3912

Malware in sbrugna...

EUVD-2018-1008

Malware in sbrugna...

EUVD-2015-4260

Malware in sbrugna...

EUVD-2021-6595

Malicious code in bioql PyPI...

BIT-JENKINS-2024-23897

Jenkins LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...