5342 matches found
Exploit for CVE-2024-4956
CVE-2024-4956 !My Shophttps://img.shields.io/badge/My%20S...
CVE-2024-30163
Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\store::categoryView method, where user input passed through the filter request parameter is not properly sanitized before being used to execute SQL queries...
CVE-2024-30163
Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\store::categoryView method, where user input passed through the filter request parameter is not properly sanitized before being used to execute SQL queries...
nexus-corr-discovery (=0.0.1.post2) potentially affected by CVE-2024-3408 via dtale (=3.12.0)
dtale PYPI version =3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on dtale and may be impacted: - nexus-corr-discovery =0.0.1.post2 Source cves: CVE-2024-3408 Source advisory: OSV:PYSEC-2024-117...
The vulnerability in the web interface for managing analytics and automation of cloud network data centers of Cisco Nexus Dashboard allows a attacker to perform a CSRF attack.
The vulnerability in the web interface for managing analytics and automation of cloud network data centers of Cisco Nexus Dashboard is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...
The vulnerability of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud computing data centers, stems from deficiencies in access control. This allows unauthorized individuals to gain unauthorized access to protected information.
The vulnerability of the Cisco Nexus Dashboard analytics and cloud-based data center automation platform is related to deficiencies in access control to the final API endpoint. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending...
Exploit for CVE-2024-4956
CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Ne...
The vulnerability of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud computing data centers, stems from inadequate access control mechanisms. This allows attackers to elevate their privileges to the root level.
The vulnerability of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud computing data centers, is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to elevate their privileges to the root level...
The vulnerability of the network management tool and Cisco Nexus Dashboard Orchestrator’s policies (formerly known as Cisco Multi-Site Orchestrator) is related to deficiencies in access control. This allows a malicious actor to gain read, modify, or delete access to data.
The vulnerability of the network management tool and Cisco Nexus Dashboard Orchestrator’s formerly Cisco Multi-Site Orchestrator policies is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...
Exploit for CVE-2024-4956
CVE-2024-4956 : Nexus Repository Manager 3 Dork: - Shodan:...
Nexus Repository 3.x < 3.68.1 Path Traversal
Nexus Repository version 3.x prior to 3.68.1 is affected by a Path Traversal allowing an attacker to create a URL returning any file for download, including system files outside the scope of the Nexus Repository application, without any authentication. No source data...
Path Traversal Vulnerability in Sonatype Nexus Repository
Nexus Repository Manager is a repository management system. A path traversal vulnerability exists in Sonatype Nexus Repository Manager that can be exploited by an attacker to obtain sensitive information...
Exploit for CVE-2024-4956
CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Reposi...
Exploit for CVE-2024-4956
CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Reposi...
Exploit for CVE-2024-4956
CVE-2024-4956 Nexus Reposito...
Exploit for CVE-2024-4956
CVE-2024-4956 Nexus Reposito...
PT-2024-9211 · Sonatype · Sonatype Nexus Repository
Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository 2 versions up to and including 2.15.1 Description: A Remote Code Execution issue has been discovered, related to incorrect code generation management. This allows a remote attacker to execute arbitrary code by...
PT-2024-9210 · Sonatype · Sonatype Nexus Repository 2
Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository 2 versions up to and including 2.15.1 Description: A stored Cross-site Scripting vulnerability has been discovered, which affects the structure of web pages. This issue may allow a remote attacker to perform cross-si...