CVE-2026-20038

A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploi...

CVE-2026-76485

A vulnerability exists in the VXLAN Operation, Administration, and Maintenance (OAM) feature, known as NGOAM , in Cisco NX-OS Software running on Nexus 3000 and 9000 Series Switches . The root cause is improper input validation of IP traffic when the NGOAM feature is enabled. An unauthenticated, ...

CVE-2026-76465 Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

A vulnerability in the MPLS Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of...

EUVD-2026-94457

A vulnerability in the MPLS Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of...

CVE-2026-76465 Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

A vulnerability in the MPLS Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of...

EUVD-2026-94446

A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploi...

CVE-2026-20038 Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability

A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploi...

CVE-2026-20038 Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability

A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploi...

CVE-2026-20038

A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode allows an unauthenticated, remote attacker to bypass configured EPG contracts. The root cause is an improper control where an attacker can send IPv4 or IPv6 packets using UDP ...

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability

A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploi...

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

A vulnerability in the MPLS Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of...

Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software, known as Next Generation OAM NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an...

nmap-scripts

nmap-scripts nmap scripts for vuln cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 SMBv3 protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code...

PT-2026-107584

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Fabric Switches in ACI Mode affected versions not specified Description An improper control within the endpoint group EPG contract functionality allows an unauthenticated remote attacker to bypass configured EPG...

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass (cisco-sa-aci-epgcbp-SfDU7NLf)

According to its self-reported version, Cisco NX-OS System Software in ACI Mode is affected by a vulnerability. - A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x远程命令执行漏洞】 漏洞名称： Nexus Repository Manager 2.x远程命令执行漏洞 漏洞描述： Nexus Repository Manager 2.X存在远程命令执行漏洞，该漏洞默认存在部署权限账号， 成功登录后可使用“createrepo”或“mergerepo”自定义配置，可触发远程命令执行漏洞。 漏洞利用： 太长了，，，直接看文章吧： https://www.jianshu.com/p/545627664888 Demo:...

CVE-2024-4956

一个脚本仓库，这些脚本是我在“Art of Defence”博客中编写的。 Art-of-Defence - Sonatype Nexus CVE-2024-4956:...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

Este script está dirigido a la vulnerabilidad de inyección EL en Nexus Repository Manager 3 CVE-2018-16621 y ejecuta la explotación de la vulnerabilidad con un solo clic para obtener una reverse shell. Ejemplo de ejecución: Ejecute el script localmente en la máquina del atacante e introduzca, seg...

cve-2015-1538-1

包含一个Python脚本，用于生成利用‘stsc’漏洞（即CVE-2015-1538（1））的MP4文件。这是我报告的Stagefright库中最关键的漏洞之一。此漏洞利用的预期结果是获得媒体用户权限的反向Shell。正如我在Black Hat和DEF CON演讲中详细所述，该用户还能访问相当多的组，例如inet、audio、camera和mediadrm。这些组允许攻击者远程拍照或收听麦克风，而无需利用其他漏洞。 此漏洞利用存在一些注意事项。首先，它并非通用漏洞利用，仅在一款设备型号上测试通过。我的目标是运行Android 4.0.4且仅实现部分ASLR的Galaxy...

shirocrack

shirocrack 用 Golang 编写的 Apache Shiro 哈希的简单哈希破解工具。适用于利用 CVE-2024-4956。 长话短说 CVE-2024-4956 是 Sonatype Nexus Repository 中的一个路径穿越漏洞，未经身份验证的攻击者只要知道路径，就可以通过网络访问服务器读取系统中的任意文件 我看到的所有利用演示都是拉取 /etc/passwd 就完事了，这固然好，但并没有 真正 解释它为什么获得那么高的 CVSS 评分 Nexus 3.60.0 在默认设置下使用 OrientDB，这是一种 NoSQL 数据库，说实话我还不完全理解 Orient...