6548 matches found
Cisco Nexus 9000 Series Fabric Switches security vulnerabilities
The Cisco Nexus 9000 Series switches are modular and fixed-port network switches designed for data centers. A security vulnerability exists in the Cisco Nexus 9000 Series Fabric Switches that allows an unauthenticated, remote attacker to cause the routing process to crash. No details of the...
CVE-2021-1230: Improper Handling of Parameters
A vulnerability with the Border Gateway Protocol BGP for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service DoS condition. This...
Security vulnerabilities in Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches
Cisco NX-OS Software and so on are products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco Nexus 9000 Series Switches is a 9000 series switch. A security vulnerabilit...
Cisco Nexus 9000 Series Fabric Access Control Error Vulnerability
Cisco Nexus 9000 Series Fabric Switches is a 9000 series fiber optic switch from Cisco USA. A security vulnerability exists in the Nexus 9000 Series Fabri that can be exploited by an attacker to disable switching on SFP interfaces, which could disrupt the network...
Cisco NX-OS Software Cross-Site Request Forgery Vulnerability
Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A cross-site request forgery CSRF vulnerability exists in the NX-API feature of Cisco NX-OS. The vulnerability stems from insufficient CSR...
CVE-2021-1228: Improper Access Control
A vulnerability in the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the...
CVE-2021-1231: Improper Access Control
A vulnerability in the Link Layer Discovery Protocol LLDP for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable SFP interface. This vulnerability is due to...
Cisco NX-OS Software and Cisco IOS XR security vulnerabilities
Cisco NX-OS Software and Cisco IOS XR are both products of Cisco U.S.A. Cisco NX-OS Software is a suite of data center-class operating system software for switches. cisco IOS XR is a suite of operating systems developed for its network devices. cisco IOS XR and Cisco NX-OS Software is vulnerable ...
Malicious Package
Overview From https://blog.sonatype.com/sonatype-spots-more-discord-malware-in-npm?hspreview=BbDPGbfh-40737456755: The malicious packages were detected by Sonatype’s Security Research Team leveraging Sonatype’s Nexus Intelligence research service. On analyzing these packages closely, our Security...
Exploit for OS Command Injection in Sonatype Nexus_Repository_Manager
CVE-2019-5475 CVE-2019-5475 与 CVE-2019-15588 靶场: RCE 命令注入漏洞 ------ 0x00 背景 CVE-2019-5475 是 Nexus 关于内置插件 Yum Repository 的 RCE 命令注入漏洞，其最早被披露于 hackerone，但因官方第一次修复不完整，故又衍生出了 CVE-2019-15588 漏洞。 这两个漏洞都需要以 admin 身份登录后才可以利用，但是 nexus 默认管理员密码 admin123 经常被忽略修改，很容易就被利用了。 0x10 靶场环境 0x20 目录结构 CVE-2019-5475 ├──...
Sonatype Nexus 3.21.1 Remote Code Execution
Exploit Title: Sonatype Nexus 3.21.1 - Remote Code Execution Authenticated Exploit Author: 1F98D Original Author: Alvaro Muñoz Date: 27 May 2020 Vendor Hompage: https://www.sonatype.com/ CVE: CVE-2020-10199 Tested on: Windows 10 x64 References:...
Sonatype Nexus 3.21.1 - Remote Code Execution (Authenticated)
Exploit Title: Sonatype Nexus 3.21.1 - Remote Code Execution Authenticated Exploit Author: 1F98D Original Author: Alvaro Muñoz Date: 27 May 2020 Vendor Hompage: https://www.sonatype.com/ CVE: CVE-2020-10199 Tested on: Windows 10 x64 References:...
CVE-2020-29436
Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...
CVE-2020-29436
Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...
Design/Logic Flaw
Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...
CVE-2020-29436
Sonatype Nexus Repository Manager 3.x prior to 3.29.0 is affected by an XML External Entity (XXE) vulnerability that an administrator can exploit to access content outside of NXRM. Root cause: XXE in Nexus configuration/XML processing. Impact stated as access to external content; remediation: upg...
CVE-2020-29436: Improper Restriction of XML External Entity Reference
Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...
PT-2020-17160
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.29.0 Description The issue allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Recommendations For versions prior...
Sonatype Nexus Repository Manager External Entity Injection Vulnerability
Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. An external entity injection vulnerability exists in the Sonatype Nexus Repository Manager product, which allows an attacker with Nexus Repository Manager administrator privileges to configure the system in su...
