CVE-2019-16530: Unrestricted Upload of File with Dangerous Type

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...

Sonatype Nexus Repository Manager Remote Code Execution Vulnerability (CNVD-2019-37731)

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A remote code execution vulnerability exists in Sonatype NXRM, which can be exploited by an attacker to upload malicious files...

Sonatype Nexus Repository Manager Remote Code Execution Vulnerability

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A remote code execution vulnerability exists in Sonatype NXRM version 2.x prior to 2.14.15, which can be exploited by an attacker to execute code...

Remote Code Execution

Sonatype Nexus Repository Manager is vulnerable to remote code execution. An attacker with administrative access to NXRM is able to create repositories that can grant access to read/execute system data outside the scope of NXRM...

CVE-2019-15893

Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...

CVE-2019-15893

Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...

Remote code execution

Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...

CVE-2019-15893

Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...

CVE-2019-15893

CVE-2019-15893 affects Sonatype Nexus Repository Manager 2.x prior to 2.14.15. A vulnerability exists that, with administrative NXRM access, allows an attacker to create repositories that grant read/execute access to system data outside the intended scope, enabling remote code execution on the se...

CVE-2019-15893: Undefined Security Weakness

Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...

PT-2019-14457

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions 2.x through 2.14.14 Description The issue allows for Remote Code Execution. Recommendations For versions 2.x through 2.14.14, update to version 2.14.15 or later to resolve the issue...

LOWKEY: Hunting for the Missing Volume Serial ID

In August 2019, FireEye released the “Double Dragon” report on our newest graduated threat group: APT41. A China-nexus dual espionage and financially-focused group, APT41 targets industries such as gaming, healthcare, high-tech, higher education, telecommunications, and travel services. This blog...

Sonatype Nexus Repository Manager CVE-2019-15588 OS Command Injection Vulnerability

Description Sonatype Nexus Repository Manager is prone to an OS command-injection vulnerability. An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further attacks. Versions prior to Nexus Repository Manager...

Cisco NX-OS DoS

The vulnerability of the Cisco Fabric Services component of the Cisco NX-OS operating system is related to errors in processing TCP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

NX-OS Endpoint Learning DoS

The vulnerability of the Endpoint Learning function in the network operating system NX-OS of Cisco Nexus series 9000 switches is related to state management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco NX-OS IPv6 DoS

The vulnerability of the IPv6 traffic processing service of the Cisco NX-OS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco NX-OS Software Operating System Command Injection Vulnerability

Cisco Nexus 3000 Series Switches and other products are Cisco products.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco Nexus 3500 Platform Switches is a 3500 series platform switch.Cisco Nexus 3600 Platform Switches is a 3600 series platform switch.Cisco NX-OS Software is a set of...

CVE-2019-12662

A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper...

Exploit for OS Command Injection in Sonatype Nexus_Repository_Manager

CVE-2019-5475-Nexus-Repository-Manager- Payload PUT /...

io.takari.nexus.assemblies:takari-oss (1.0.1) potentially affected by CVE-2019-5475 via org.sonatype.nexus.plugins:nexus-yum-repository-plugin (2.13.0-01)

org.sonatype.nexus.plugins:nexus-yum-repository-plugin MAVEN version 2.13.0-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus.plugins:nexus-yum-repository-plugin and may be impacted: - io.takari.nexus.assemblies:takari-oss 1.0.1...