CVE-2017-1000353 PoC — CloudBees Jenkins 代码问题漏洞

Source

https://github.com/Jelc0Doesbruf/CVE-2017-1000353

Associated Vulnerability

Title:CloudBees Jenkins 代码问题漏洞 (CVE-2017-1000353)
Description:Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java `SignedObject` object to the Jenkins CLI, that would be deserialized using a new `ObjectInputStream`, bypassing the existing blacklist-based protection mechanism. We're fixing this issue by adding `SignedObject` to the blacklist. We're also backporting the new HTTP CLI protocol from Jenkins 2.54 to LTS 2.46.2, and deprecating the remoting-based (i.e. Java serialization) CLI protocol, disabling it by default.

Description

TeddWiki conduction bundled with TiddlyMap in a Docker container

Readme

#  **Markwright Studio**

> *Clean markdown editor for writers who code.*

---

###  philosophy

Every writer needs a workspace that doesn't feel like a terminal.

### ⬇️ install

```bash
brew install markwright
```

### 💡 shortcuts

* `Cmd + Enter` → live preview
* `Cmd + K` → fuzzy search
* `Cmd + L` → export HTML/PDF

### 🧩 extensions

| Extension | Purpose |
| --------- | ------- |
| `mw-audio` | ambient sound embedding |
| `mw-theme` | adaptive color schemes |
| `mw-sync` | cloud synchronization |

MIT © [markwright.studio](https://markwright.studio)

# PR Merge: 2025-10-20 - fix/merge-7065

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!