CVE-2014-7911

CVE-2014-7911 POC for CVE-2014-7911 for Nexus5 Android 4.4.4r1 based on retme7, use different rop chain Info http://ele7enxxh.com/CVE-2014-7911-Detailed-Analysis-Of-Android-Local-Privilege-Escalation-To-System-Vulnerability.html Usage connect your phone via adb adb push jni/expolit /data/local/tm...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 Remote Code Execution without authentication nexus 关于命令回显： functionx, y, z, c, integer, defineClass c=1.class.forName'java.lang.Character'; integer=1.class; x='...

CVE-2024-4956

CVE-2024-4956 This repository contains a Python utility for automating the exploitation of CVE-2024-4956 and is capable of mass testing file paths from an input file while automating the process of saving existing file path contents to disk for analysis. Details for the vulnerability can be found...

Joomla! Portfolio Nexus - Remote File Inclusion

Joomla! Portfolio Nexus 1.5 contains a remote file inclusion vulnerability in the inertialFATE iF comifnexus component that allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2009-4679 info: name: Joomla! Portfol...

Sonatype Nexus Repository Manager 3 - Local File Inclusion

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. id: CVE-2024-4956 info: name: Sonatype Nexus Repository Manager 3 - Local File Inclusion author: ritikchaddha severity: high description: | Path Traversal in Sonatype...

Nexus Repository 2 - Remote Code Execution

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1. id: CVE-2024-5082 info: name: Nexus Repository 2 - Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: hi...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 Remote Code Execution without authentication 3.15.0 found by Rico Tencent Security Yunding Lab and @voidfyoo Detailed analysis english: https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/...

nexus-os

Nexus OS The Governed Agentic AI Operating System 66 Crates | 675 Commands | 86 Pages | 5,229 Tests | 10/10 OWASP | Zero Stubs Local-first. Air-gappable. Post-quantum ready. Built in Rust. Architecture | Quick Start | Features | Audit Status | Docs Nexus OS is an AI agent operating system where...

day04-nexus-4956

Day 4 – Nexus Repository 3 Path Traversal CVE-2024-4956 What: Unauthenticated path traversal lets anyone download arbitrary files with a crafted URL. Vuln: Affects Nexus Repo 3 versions ≤ 3.68.0. Fixed in 3.68.1. Source: Sonatype advisory + NVD. Safety: Lab is local-only. Don’t target systems you...

CVE-2024-4956-Bulk-Scanner

README.md CVE-2024-4956 Bulk Scanner Disclaimer This tool is intended only for educational purposes and for testing in corporate environments. https://twitter.com/nav1n0x/ and https://github.com/ifconfig-me take no responsibility for the misuse of this code. Use it at your own risk. Do not attack...

HTB-Nexus-walkthrough

💻 Nexus - Hack The Box Writeup 📋 Machine Information Name: Nexus Difficulty: Easy OS: Linux Ubuntu Completion date: September 23, 2026 🔍 Reconnaissance 1. Connection and nmap Connect to the VPN and start port scanning: Openvpn The message "Initialization Sequence Completed" should appear Check...

CVE-2020-11444

CVE-2020-11444 Nexus 3 Unauthorized Access Exploit Script For more exploit scripts, see: https://github.com/zhzyker/exphub Readme +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with Remote Access VPN or Mobile Access Software Blades. A securit...

CVE-2019-7238_Nexus_RCE_Tool

Maimentong CVE-2019-7238 Nexus RCE Vulnerability Detection Tool Tool Introduction I wrote this small tool in Java in my spare time. It supports one-click detection of the CVE-2019-7238 vulnerability and execution of system commands, with both GUI and command-line usage. This tool is restricted to...

Metaphor

Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter: https://twitter.com/HighByte Metaphor's source code is now released! The source include a PoC that generat...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Remote Command Execution Script More script files at: https://github.com/zhzyker/exphub Readme +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Command Execution Vulnerability】 Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...

CVE-2020-10199

Nexus Repository Manager 3 Vuln Affected versions: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 Remote Code Execution Echo PoC No Echo PoC $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' Normal User Privileges...

CVE-2019-5475

CVE-2019-5475 CVE-2019-5475 and CVE-2019-15588 Range: RCE Command Injection Vulnerability 0x00 Background CVE-2019-5475 is an RCE command injection vulnerability in Nexus regarding the built-in plugin Yum Repository. It was first disclosed on hackerone, but because the official first fix was...

snmpvlan

snmpvlan CVE ID: CVE-2014-3341. Cisco Bug ID: CSCup85616. NexusTaco is a snmp scanner that can be used both for internal testing and external testing to assess Cisco Nexus switches 5000 and 6000 family. There are many snmp scanners and brute forcers this was made for just completeness.It has the...