nexus_rce_CVE-2019-7238

nexusrceCVE-2019-7238 Some debug notes and exploitnot blind Exploit 使用burpsuite，修改请求中的ls / -al即可，注意双引号会被替换成单引号 POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.14; rv:63.0 Gecko/20100101 Firefox/63.0 Accept: / Content-Type: application/json...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 远程代码执行 Nexus Repository Manager 3 无需身份验证的远程代码执行 版本 nexus 关于命令回显： functionx, y, z, c, integer, defineClass c=1.class.forName'java.lang.Character'; integer=1.class;...

EUVD-2022-1811

Malicious code in bioql PyPI...

GHSA-QF79-34J4-54M6 Typo3 Improper Access Control

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

Typo3 Improper Access Control

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

CVE-2011-4904

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

Design/Logic Flaw

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

CVE-2011-4904

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

CVE-2011-4904

CVE-2011-4904 affects TYPO3 ExtDirect in TYPO3 4.4.x and 4.5.x prior to the fixed releases. The root cause is missing access control on ExtDirect calls, allowing remote attackers to retrieve ExtDirect endpoint services. Public descriptions consistently state that TYPO3 before 4.4.9 and 4.5.x befo...

CVE-2011-4904

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

CVE-2011-4904

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

PT-2019-6707

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 4.4.9 TYPO3 versions 4.5.x prior to 4.5.4 Description The issue allows remote attackers to retrieve ExtDirect endpoint services due to improper access control on ExtDirect calls. Recommendations For versions prior to...

CVE-2011-4904: Improper Input Validation

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

TYPO3 ExtDirect Missing Access Control Vulnerability (TYPO3-CORE-SA-2011-001)

TYPO3 is prone to a missing access control vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...