152 matches found
QVD-2024-26473
QVD-2024-26473 QVD-2024-26473 && CVE-2021-29442 Búsqueda FOFA: https://fofa.info/result?qbase64=YXBwPSJOYWNvcyI%3D Búsqueda ZoomEye: https://www.zoomeye.org/searchResult?q=app%3A%22Alibaba%20Nacos%22...
Nacos <1.4.1 - Authentication Bypass
Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...
Nacos <1.4.1 - Authentication Bypass
This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...
CVE-2021-29441
CVE-2021-29441 - Bypass de Autenticación en Nacos CVE-2021-29441 es una vulnerabilidad crítica de bypass de autenticación que afecta a Nacos versiones anteriores a la 1.4.1. Nacos es una plataforma popular para el descubrimiento dinámico de servicios, gestión de configuración y administración de...
nacos-cve-2021-29441
This repository does not have a README...
CVE-2021-29441
CVE-2021-29441 Ejecutar: CVE-2021-29441.exe ip Alibaba Nacos: adición no autorizada de cuentas...
alibaba__nacos_CVE-2021-44667_2-0-3
Nacos: S ervicio dinámico de Na ming y Co nfiguración...
cve-2021-29442-Nacos-Derby-rce-exp
Introduction Nacos Derby command execution vulnerability exploitation script, by default uses User-Agent bypass to exploit the vulnerability Nacos is an open-source platform for service registration, discovery, and configuration management. In its early versions ≤2.4.0-BETA, Nacos integrates Apac...
Alibab-Nacos-Unauthorized-Reset-PWD
Impacto de la vulnerabilidad Se ha descubierto un problema en Nacos que afecta a Nacos = 2.2.0. Cuando un usuario utiliza la clave JWT predeterminada, un atacante puede restablecer la contraseña de cualquier usuario y tomar el control de la cuenta. Producto afectado Versión Nacos = 2.2.0...
Alibab-Nacos-Unauthorized-Login
Impacto de la vulnerabilidad Se ha descubierto un problema en Nacos que afecta a Nacos = 2.1.0. Los usuarios de Nacos utilizan la clave JWT predeterminada, lo que provoca una vulnerabilidad de acceso no autorizado. Mediante esta vulnerabilidad, los atacantes pueden omitir la autenticación de nomb...
CVE-2021-29441
CVE-2021-29441 Usage: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...
CVE-2022-40087
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71968 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:35+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:36+00:00| seen|...
PocList
This project is temporarily paused. During later updates, I realized two issues: First, it seems my declaration of the Cybersecurity Law in the repository was insufficient, leading to some results I did not intend. Second, at the initial design stage of this project, I did not consider some...
Spring-Cloud-Gateway-Nacos
Este repositorio no tiene un README...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: zipkin, airbyte-server-fips, ontop-fips, dependency-track-apiserver, hono, nacos-docker, keycloak, kafka-bridge, keycloak-fips, knative-kafka-broker-fips, kafka-bridge-fips, airbyte-server, camunda-zeebe, apicurio-registry-fips, request-9047-keycloak-fips, apache-nif...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: zipkin, airbyte-server-fips, ontop-fips, dependency-track-apiserver, hono, nacos-docker, keycloak, kafka-bridge, keycloak-fips, knative-kafka-broker-fips, kafka-bridge-fips, airbyte-server, camunda-zeebe, apicurio-registry-fips, request-9047-keycloak-fips, apache-nif...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, keycloak, zipkin, dependency-track, airbyte-server-fips, dependency-track-apiserver, infinispan, keycloak-fips, apicurio-registry-fips, nacos, request-9047-keycloak-fips, apicurio-registry, nacos-docker, airbyte-server, apache-nifi...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, keycloak, zipkin, dependency-track, airbyte-server-fips, dependency-track-apiserver, infinispan, keycloak-fips, apicurio-registry-fips, nacos, request-9047-keycloak-fips, apicurio-registry, nacos-docker, airbyte-server, apache-nifi...
Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation
A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat...
