158 matches found
Spring-Cloud-Gateway-Nacos
This repository does not have a README...
Nacos <1.4.1 - Authentication Bypass
Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...
CVE-2021-29441
CVE-2021-29441 Run: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...
QVD-2024-26473
QVD-2024-26473 QVD-2024-26473 && CVE-2021-29442 FOFA Search: https://fofa.info/result?qbase64=YXBwPSJOYWNvcyI%3D ZoomEye Search: https://www.zoomeye.org/searchResult?q=app%3A%22Alibaba%20Nacos%22...
PocList
This project is temporarily paused. During later updates, I realized two issues: First, it seems my declaration of the Cybersecurity Law in the repository was insufficient, leading to some results I did not intend. Second, at the initial design stage of this project, I did not consider some...
cve-2021-29442-Nacos-Derby-rce-exp
Introducción Script de explotación de la vulnerabilidad de ejecución remota de comandos en Nacos Derby, que por defecto utiliza la omisión de User-Agent para explotar la vulnerabilidad. Nacos es una plataforma de código abierto para registro, descubrimiento y gestión de configuración de servicios...
Alibab-Nacos-Unauthorized-Reset-PWD
Impacto de la vulnerabilidad Se ha descubierto un problema en Nacos que afecta a Nacos = 2.2.0. Cuando un usuario utiliza la clave JWT predeterminada, un atacante puede restablecer la contraseña de cualquier usuario y tomar el control de la cuenta. Producto afectado Versión Nacos = 2.2.0...
Alibab-Nacos-Unauthorized-Login
Vuln Impact An issue has been discovered in Nacos affecting Nacos = 2.1.0.Nacos users use the default JWT key to cause an unauthorized access vulnerability. Through this vulnerability, attackers can bypass user name and password authentication and directly log in to the Nacos user Vuln Product...
Nacos <1.4.1 - Authentication Bypass
This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...
nacos-cve-2021-29441
This repository does not have a README...
CVE-2021-29441
CVE-2021-29441 Usage: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...
alibaba__nacos_CVE-2021-44667_2-0-3
Nacos: S ervicio dinámico de Na ming y Co nfiguración...
CVE-2021-29441
CVE-2021-29441 - Bypass de Autenticación en Nacos CVE-2021-29441 es una vulnerabilidad crítica de bypass de autenticación que afecta a Nacos versiones anteriores a la 1.4.1. Nacos es una plataforma popular para el descubrimiento dinámico de servicios, gestión de configuración y administración de...
CVE-2022-40087
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71968 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:35+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:36+00:00| seen|...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: knative-kafka-broker, dependency-track, keycloak-fips, dependency-track-apiserver, apicurio-registry, hono, request-9047-keycloak-fips, infinispan, nacos-docker, nacos, keycloak, ontop-fips, zipkin, ontop, airbyte-server-fips, airbyte-server, camunda-zeebe,...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: zipkin, dependency-track, request-9047-keycloak-fips, infinispan, keycloak-fips, nacos-docker, nacos, dependency-track-apiserver, keycloak, airbyte-server-fips, apache-nifi, apicurio-registry, airbyte-server, apicurio-registry-fips, camunda-zeebe...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: knative-kafka-broker, dependency-track, keycloak-fips, dependency-track-apiserver, apicurio-registry, hono, request-9047-keycloak-fips, infinispan, nacos-docker, nacos, keycloak, ontop-fips, zipkin, ontop, airbyte-server-fips, airbyte-server, camunda-zeebe,...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: zipkin, dependency-track, request-9047-keycloak-fips, infinispan, keycloak-fips, nacos-docker, nacos, dependency-track-apiserver, keycloak, airbyte-server-fips, apache-nifi, apicurio-registry, airbyte-server, apicurio-registry-fips, camunda-zeebe...
Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation
A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat...
