Lucene search
+L

129 matches found

Kitploit
Kitploit
added 2026/09/24 3:24 a.m.15 views

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 Unauthenticated Path Traversal...

7.5CVSS7.7AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/23 2:13 p.m.9 views

Path-Traversal-CVE-2024-4956

This repository does not have a README...

7.5CVSS7.5AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/23 5:10 a.m.7 views

CVE-2024-4956-Bulk-Scanner

README.md CVE-2024-4956 Bulk Scanner Disclaimer This tool is intended only for educational purposes and for testing in corporate environments. https://twitter.com/nav1n0x/ and https://github.com/ifconfig-me take no responsibility for the misuse of this code. Use it at your own risk. Do not attack...

7.5CVSS7.4AI score0.18245EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/22 9:24 p.m.10 views

CVE-2024-4956

CVE-2024-4956 All information is provided for informational purposes only. python3 CVE-2024-4956-threads.py - targetstextfile - outputtextfile nuclei -t nucleiactive.yaml -l targets.txt nuclei -t nucleipassive.yaml -l targets.txt -json-export output.json; then parse in any way targets.txt form:...

7.5CVSS7.7AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/22 4:48 p.m.10 views

day04-nexus-4956

Día 4 – Nexus Repository 3 Path Traversal CVE-2024-4956 Qué: El path traversal sin autenticación permite a cualquiera descargar archivos arbitrarios con una URL manipulada. Vuln: Afecta a versiones de Nexus Repo 3 ≤ 3.68.0. Corregido en 3.68.1. Fuente: Aviso de Sonatype + NVD. Seguridad: El...

7.5CVSS7.9AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/21 1:33 p.m.10 views

CVE-2024-4956

A repository of scripts that were produced as part of my "Art of Defence" blog. Art-of-Defence - Sonatype Nexus CVE-2024-4956:...

7.5CVSS7.5AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/20 1:58 p.m.8 views

CVE-2024-4956

This repository does not have a README...

7.5CVSS7.5AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/20 1:30 p.m.9 views

CVE-2024-4956

Badges License MIT Installation 1. Install Python3 and pip If you can't figure this out, you shouldn't really be using this...

7.5CVSS7.5AI score0.18245EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/19 5:36 p.m.9 views

CVE-2024-4956

CVE-2024-4956 Quick and easy exploitation of CVE-2024-4956 for LFI based on original PoC from: VeryLazyTech, https://github.com/verylazytech/CVE-2024-4956. This implementation takes 2 arguments, url and file, and presents the output of the file if it is found...

7.5CVSS7.6AI score0.18245EPSS
SaveExploits16References1
OSV
OSV
added 2026/07/22 3:40 p.m.8 views

MINI-4956-6H84-GXFG

Bulletin has no description...

7.5CVSS4.9AI score0.00254EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/28 4:59 p.m.12 views

CVE-2026-4956

A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. The affected element is an unknown function of the file /DevicePrint.do?Action=ReadTask of the component Parameter Handler. The manipulation of the argument State results in sql injection. The attack can be launch...

7.5CVSS6.9AI score0.00318EPSS
SaveExploits0References1
Circl
Circl
added 2026/03/27 5:22 p.m.12 views

CVE-2026-4956

creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:52+00:00| published-proof-of-concept| Telegram/pyEIr0Ko2hoCavwas1rlZ1K5Q5ZdrBNaOpK3idLXyAytNFs...

7.5CVSS7.3AI score0.00318EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/03/27 2:52 p.m.7 views

CVE-2026-4956 Shenzhen Ruiming Technology Streamax Crocus Parameter DevicePrint.do sql injection

A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. The affected element is an unknown function of the file /DevicePrint.do?Action=ReadTask of the component Parameter Handler. The manipulation of the argument State results in sql injection. The attack can be launch...

7.5CVSS6.9AI score0.00318EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/02 9:16 a.m.15 views

CVE-2026-20423

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956...

7.8CVSS5.9AI score0.00122EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/02 8:37 a.m.52 views

CVE-2026-20423

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956...

0.00122EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2026/02/05 12:00 a.m.260 views

📄 Nexus Repository Manager 3.53.0-01 File Disclosure / Traversal

A critical path traversal vulnerability exists in Sonatype Nexus Repository Manager 3 that allows unauthenticated attackers to read arbitrary files from the server filesystem through crafted URL paths. This is a proof of concept for an issue discovered in 2024...

7.5CVSS8.4AI score0.18245EPSS
SaveExploits16
OSV
OSV
added 2026/01/29 12:48 a.m.10 views

CGA-X43Q-4956-5WFQ

Bulletin has no description...

7.5CVSS5.8AI score0.01994EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 11:53 a.m.14 views

CVE-2009-4956

Cross-site scripting XSS vulnerability in the Visitor Tracking wsstats extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.00845EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/30 1:49 a.m.3 views

CVE-2025-4956 WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through 2.0...

4.3CVSS6.3AI score0.00301EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/08/24 3:38 p.m.194 views

Exploit for CVE-2024-4956

CVE-2024-4956 Quick and easy exploitation of CVE-2...

7.5CVSS8.8AI score0.18245EPSS
SaveExploits16
Rows per page
Query Builder