PocList

This project is temporarily paused. During later updates, I realized two issues: First, it seems my declaration of the Cybersecurity Law in the repository was insufficient, leading to some results I did not intend. Second, at the initial design stage of this project, I did not consider some...

Alibab-Nacos-Unauthorized-Reset-PWD

Vuln Impact An issue has been discovered in Nacos affecting Nacos = 2.2.0. When a user uses the default JWT Key, it will cause an attacker to reset the password of any user and take over the user account. Vuln Product Nacos = 2.2.0 version Vulnerability reappearance Step 1：Get username can use ol...

Alibab-Nacos-Unauthorized-Login

Vuln Impact An issue has been discovered in Nacos affecting Nacos = 2.1.0.Nacos users use the default JWT key to cause an unauthorized access vulnerability. Through this vulnerability, attackers can bypass user name and password authentication and directly log in to the Nacos user Vuln Product...

Spring-Cloud-Gateway-Nacos

This repository does not have a README...

cve-2021-29442-Nacos-Derby-rce-exp

Introduction Nacos Derby command execution vulnerability exploitation script, by default uses User-Agent bypass to exploit the vulnerability Nacos is an open-source platform for service registration, discovery, and configuration management. In its early versions ≤2.4.0-BETA, Nacos integrates Apac...

Nacos <1.4.1 - Authentication Bypass

Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...

Nacos <1.4.1 - Authentication Bypass

This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...

alibaba__nacos_CVE-2021-44667_2-0-3

Nacos: Dynamic Na ming and Co nfiguration S ervice What does it do Nacos official site: nacos.io is an easy-to-use platform designed for dynamic service discovery and configuration and service management. It helps you to build cloud native applications and microservices platform easily. Service i...

QVD-2024-26473

QVD-2024-26473 QVD-2024-26473 && CVE-2021-29442 FOFA Search: https://fofa.info/result?qbase64=YXBwPSJOYWNvcyI%3D ZoomEye Search: https://www.zoomeye.org/searchResult?q=app%3A%22Alibaba%20Nacos%22...

CVE-2021-29441

CVE-2021-29441 Run: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...

nacos-cve-2021-29441

This repository does not have a README...

CVE-2021-29441

CVE-2021-29441 Usage: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...

CVE-2021-29441

CVE-2021-29441 - Nacos 인증 우회 CVE-2021-29441 는 Nacos 버전 1.4.1 미만에 영향을 미치는 치명적인 인증 우회 취약점입니다. Nacos는 클라우드 네이티브 환경에서 사용되는 동적 서비스 검색, 구성 관리 및 서비스 관리를 위한 인기 있는 플랫폼입니다. 이 취약점으로 인해 인증되지 않은 공격자가 인증 제어를 우회하고 취약한 Nacos 서버에서 관리 작업을 수행할 수 있습니다. 취약점 상세 정보 필드| 값 ---|--- CVE| CVE-2021-29441 심각도| 심각 CVSS v3.1| 9...

CVE-2022-40087

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71968 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:35+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:36+00:00| seen|...

nacos-authscope

Nacos 3.x: Authentication Scope Mismatch Unauthorized Self-Bu...

nacos-authscope-poc

Nacos 3.x: Authentication Scope Mismatch Unauthorized Self-Bu...

CVE-2026-40983 vulnerabilities

Vulnerabilities for packages: keycloak, dependency-track-apiserver, nacos-docker, zipkin, infinispan, camunda-zeebe, dependency-track, keycloak-fips, nacos, airbyte-server-fips, apache-nifi, request-9047-keycloak-fips, apicurio-registry-fips, airbyte-server, apicurio-registry...

CVE-2026-40984 vulnerabilities

Vulnerabilities for packages: dependency-track-apiserver, nacos-docker, keycloak-fips, knative-kafka-broker-fips, apache-nifi, ontop, apicurio-registry-fips, request-9047-keycloak-fips, ontop-fips, infinispan, keycloak, kafka-bridge, airbyte-server-fips, airbyte-server, apicurio-registry, hono,...

GHSA-G3PR-3P32-FP23 vulnerabilities

Vulnerabilities for packages: dependency-track-apiserver, nacos-docker, keycloak-fips, knative-kafka-broker-fips, apache-nifi, ontop, apicurio-registry-fips, request-9047-keycloak-fips, ontop-fips, infinispan, keycloak, kafka-bridge, airbyte-server-fips, airbyte-server, apicurio-registry, hono,...

GHSA-W737-WX49-QJ23 vulnerabilities

Vulnerabilities for packages: keycloak, dependency-track-apiserver, nacos-docker, zipkin, infinispan, camunda-zeebe, dependency-track, keycloak-fips, nacos, airbyte-server-fips, apache-nifi, request-9047-keycloak-fips, apicurio-registry-fips, airbyte-server, apicurio-registry...