11 matches found
CVE-2024-23897
CVE-2024-23897 Debido a una mala configuración de una opción predeterminada en el analizador de comandos CLI, un atacante puede leer archivos arbitrarios Resumen del CVE Jenkins 2.441 y anteriores, LTS 2.426.2 y anteriores no deshabilitan una característica de su analizador de comandos CLI que...
poc-CVE-2024-23897
poc-CVE-2024-23897 CVE-2024-23897: Lectura Arbitraria de Archivos en Jenkins que lleva a RCE 🎯 Productos y Versiones Afectados root@kitploit: Producto: Jenkins Servidor de Integración Continua/Entrega Continua Versiones: Jenkins 2.441 y anteriores, Jenkins LTS 2.426.2 y anteriores Corregido en:...
openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand
A flaw was found in OpenSSH where control characters in usernames were not properly validated when sourced from untrusted inputs like the command line or configuration expansion. If a ProxyCommand is used, these control characters could modify command behavior, potentially leading to code executi...
EUVD-2016-2866
Malware in sbrugna...
CVE-2025-61984
CVE-2025-61984 affects OpenSSH before 10.1. It allows control characters in usernames originating from untrusted sources (command line or %-sequence expansion in a config file), potentially enabling code execution when a ProxyCommand is used. A config file that provides a complete literal usernam...
CVE-2024-55909 IBM Concert Software denial of service
IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption...
PT-2025-18730 · Ibm · Ibm Concert
Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.0.5 Description: The issue allows an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption. Recommendations: For IBM Concer...
CVE-2024-36116 Path traversal in Reposilite javadoc file expansion
Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite provides support for JavaDocs files, which are archives that contain documentation for artifacts. Specifically, JavadocEndpoints.kt controller allows to expand the...
CVE-2024-23899
Jenkins Git server Plugin 99.va0826abcdfad and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing attackers with Overall/Read permission to read content from arbitrary files on the Jenki...
Arbitrary file read vulnerability through the CLI can lead to RCE
Jenkins has a built-in command line interface CLI to access Jenkins from a script or shell environment. Jenkins uses the https://github.com/kohsuke/args4jargs4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature...