129 matches found
CVE-2024-4956
一个脚本仓库，这些脚本是我在“Art of Defence”博客中编写的。 Art-of-Defence - Sonatype Nexus CVE-2024-4956:...
CVE-2024-4956-Bulk-Scanner
README.md CVE-2024-4956 批量扫描器 免责声明 该工具仅用于教育目的和企业环境测试。https://twitter.com/nav1n0x/ 和 https://github.com/ifconfig-me 对滥用此代码不承担任何责任。请自行承担风险。不要攻击你没有权限接触的目标。该工具使用了公开发布的负载。 该扫描器帮助安全爱好者批量扫描 Nexus Repository 目标中的路径遍历漏洞。 扫描器将显示加载的目标数量及当前扫描状态。URL 将根据结果列出三种状态信息：超时、失败或成功。请确保 targets.txt 包含域名列表，lfi-payloads.t...
Path-Traversal-CVE-2024-4956
This repository does not have a README...
CVE-2024-4956
CVE-2024-4956 Nexus Repository Manager 3 未认证路径遍历...
CVE-2024-4956
CVE-2024-4956 所有信息仅供说明用途。 python3 CVE-2024-4956-threads.py - targetstextfile - outputtextfile nuclei -t nucleiactive.yaml -l targets.txt nuclei -t nucleipassive.yaml -l targets.txt -json-export output.json; 然后以任意方式解析 targets.txt 格式： IP:PORT IP:PORT IP:PORT ... PoC...
day04-nexus-4956
Día 4 – Nexus Repository 3 Path Traversal CVE-2024-4956 Qué: El path traversal sin autenticación permite a cualquiera descargar archivos arbitrarios con una URL manipulada. Vuln: Afecta a versiones de Nexus Repo 3 ≤ 3.68.0. Corregido en 3.68.1. Fuente: Aviso de Sonatype + NVD. Seguridad: El...
CVE-2024-4956
CVE-2024-4956 基于 VeryLazyTech（https://github.com/verylazytech/CVE-2024-4956）的原始 PoC，快速简便地利用 CVE-2024-4956 进行 LFI。 该实现接受两个参数：url 和 file，并在找到文件时显示文件内容。...
CVE-2024-4956
此存储库没有 README。...
CVE-2024-4956
徽章 许可证 MIT 安装 1. 安装 Python3 和 pip 说明在此（如果你不会，那你其实不该用这个） 通过 pip 安装 root@kitploit: pip install CVE-2024-4956 运行以下命令检查 CVE-2024-4956 -h 配置 2. 我们集成了 Telegram API，可即时接收漏洞检测通知。 Telegram 通知 root@kitploit: CVE-2024-4956 --chatid 打开你的 Telegram 并搜索 @CappricioSecuritiesToolsbot，然后点击开始 用法 3. 本工具有多种使用场景。 检测单个...
MINI-4956-6H84-GXFG
Bulletin has no description...
CVE-2026-4956
A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. The affected element is an unknown function of the file /DevicePrint.do?Action=ReadTask of the component Parameter Handler. The manipulation of the argument State results in sql injection. The attack can be launch...
CVE-2026-4956
creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:52+00:00| published-proof-of-concept| Telegram/pyEIr0Ko2hoCavwas1rlZ1K5Q5ZdrBNaOpK3idLXyAytNFs...
CVE-2026-4956 Shenzhen Ruiming Technology Streamax Crocus Parameter DevicePrint.do sql injection
A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. The affected element is an unknown function of the file /DevicePrint.do?Action=ReadTask of the component Parameter Handler. The manipulation of the argument State results in sql injection. The attack can be launch...
CVE-2026-20423
In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956...
CVE-2026-20423
In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956...
📄 Nexus Repository Manager 3.53.0-01 File Disclosure / Traversal
A critical path traversal vulnerability exists in Sonatype Nexus Repository Manager 3 that allows unauthenticated attackers to read arbitrary files from the server filesystem through crafted URL paths. This is a proof of concept for an issue discovered in 2024...
CGA-X43Q-4956-5WFQ
Bulletin has no description...
CVE-2009-4956
Cross-site scripting XSS vulnerability in the Visitor Tracking wsstats extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2025-4956 WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability
Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through 2.0...
