Lucene search
+L

18 matches found

Kitploit
Kitploit
added 2026/09/02 3:58 p.m.1 views

cve-2024-23897-jenkins_lfi_reproduction

CVE-2024-23897 — Vulnerabilidad de Lectura Arbitraria de Archivos en la CLI de Jenkins CVSS 9.8 CRÍTICO — Explotada activamente en la naturaleza Resumen CVE-2024-23897 es una vulnerabilidad crítica de lectura arbitraria de archivos en la interfaz de línea de comandos CLI de Jenkins. La CLI de...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/02 3:28 p.m.6 views

cve-2019-1003000-jenkins-rce-poc

PoC: Jenkins RCE SECURITY-1266 / CVE-2019-1003000 Script Security, CVE-2019-1003001 Pipeline: Groovy, CVE-2019-1003002 Pipeline: Declarative A proof of concept to allow users with Overall/Read permission and Job/Configure and optional Job/Build to bypass the sandbox protection and execute arbitra...

8.8CVSS7AI score0.98375EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/02 2:45 p.m.3 views

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 jenkins-cli We have seen Jenkins File Leak / RCE CVE-2024-23897 exploited in the wild and managed to reproduce it. If your Jenkins allows anonymous users or user registration, immediately update it to the latest version. java -jar jenkins-cli.jar -s...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/02 8:32 a.m.5 views

CVE2_Jenkins_RCE

Secuestro de WebSocket de Jenkins CLI - PoC Una prueba de concepto de explotación de secuestro de WebSocket entre sitios para CVE-2024-23898 — una vulnerabilidad que afecta a las versiones de Jenkins 2.217-2.441. Este exploit ataca la CLI de Jenkins, que se puede utilizar para acceder de forma...

8.8CVSS7.2AI score0.67151EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 9:28 p.m.5 views

CVE-2022-44877-RCE

此存储库没有 README。...

9.8CVSS7.4AI score0.99995EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/01 8:37 p.m.3 views

CVE-2024-23897-Arbitrary-file-read

🤵🏻 CVE-2024-23897 任意文件读取 🤵🏻 受影响版本: Jenkins 2.441 及更早版本。 Jenkins LTS 2.426.2 及更早版本。 一个用 Python 编写的脚本,用于自动化 CVE-2024-23897 漏洞 🤖 🛠️ 此 Python 代码提供了一个针对 Jenkins 服务器特定漏洞(CVE-2024-23897)的扫描器。 它首先请求用户输入 Jenkins 服务器的 URL。 然后,提供下载与 Jenkins 命令行交互所需的 jenkins-cli.jar...

9.8CVSS7.4AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/01 2:22 p.m.3 views

CVE-2024-23897

CVE-2024-23897 — Jenkins CLI 任意文件读取 快速开始 root@kitploit: 1. Start lab docker-compose up -d 2. Wait 30s, then download CLI tool curl -O http://localhost:8080/jnlpJars/jenkins-cli.jar 3. Exploit — read /etc/passwd full file java -jar jenkins-cli.jar -s http://localhost:8080 -http connect-node...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits50References1
Kitploit
Kitploit
added 2026/08/31 5:06 a.m.4 views

cve-2024-23897-jenkins-poc

CVE-2024-23897:Jenkins 任意文件读取(args4j @-语法) 针对 CVE-2024-23897 的完整自包含本地复现,这是一个 Jenkins CLI 中的严重(CVSS 3.1 基础分 9.8)任意文件读取漏洞。该项目启动两个 Docker 堆栈,它们仅在 Jenkins 次要版本上有所不同,对两者运行相同的概念验证,并展示漏洞在未修补的控制器上触发,而在已修补的控制器上静默。 一切都由一个 Python 程序 poc.py 驱动。测试工具仅编排环境(Docker Compose、官方的 jenkins-cli.jar 客户端,并逐字捕获输出)。漏洞本身存在于...

9.8CVSS7.4AI score0.99999EPSS
SaveExploits50References3
Kitploit
Kitploit
added 2026/08/30 4:38 p.m.2 views

CVE-2024-23897

Usando el cliente La sintaxis general para invocar al cliente es la siguiente: java -jar jenkins-cli.jar -s JENKINSURL global options... command command options... arguments... info :- https://www.jenkins.io/doc/book/managing/cli/downloading-the-client CVE :-...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits50
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2022-5303

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.02527EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2024/12/05 12:00 a.m.11 views

Jenkins CLI Subsystem Service Detection (TCP)

TCP based detection of services supporting the Jenkins CLI subsystem. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0References1
CISA
CISA
added 2024/08/19 12:00 p.m.22 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23897 Jenkins Command Line Interface CLI Path Traversal Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and...

9.8CVSS7.2AI score0.99999EPSS
SaveIn wildExploits50References6
Jenkins Security Advisories
Jenkins Security Advisories
added 2024/04/17 12:00 a.m.16 views

Terrapin SSH vulnerability in Jenkins CLI client

The CLI client jenkins-cli.jar in Jenkins 2.451 and earlier, LTS 2.440.2 and earlier bundles versions of the Apache MINA SSHD library that are susceptible to https://vulners.com/cve/CVE-2023-48795CVE-2023-48795 https://en.wikipedia.org/wiki/TerrapinattackTerrapin attack. This vulnerability allows...

5.9CVSS7AI score0.93305EPSS
SaveExploits4Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:09 a.m.8 views

SUSE CVE-2016-0789

CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

6.1CVSS8AI score0.0179EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2018/04/23 12:00 a.m.79 views

Jenkins Multiple Vulnerabilities (Apr 2018) - Windows

Jenkins is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.4CVSS5.3AI score0.01403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2018/01/29 5:00 p.m.8 views

CVE-2017-1000353

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java SignedObject object to the Jenkins CLI, that would be deserialized...

8.3AI score0.99679EPSS
SaveExploits37References5
Positive Technologies
Positive Technologies
added 2018/01/29 12:00 a.m.14 views

PT-2018-3792

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.56 and earlier Jenkins version 2.46.1 LTS and earlier Description The issue is related to an unauthenticated remote code execution, where an attacker can transfer a serialized Java SignedObject object to the Jenkins CLI. Thi...

10CVSS8.1AI score0.99679EPSS
SaveExploits37References19
UbuntuCve
UbuntuCve
added 2015/11/25 8:59 p.m.90 views

CVE-2015-8103

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-.jar file and the "Groovy variant in 'ysoserial'"...

9.8CVSS7.6AI score0.86714EPSS
SaveExploits12References2
Rows per page
Query Builder