764 matches found
CVE-2024-5764 Nexus Repository 3 - Static hard-coded encryption passphrase used by default
Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database SMTP or HTTP proxy credentials, user tokens, tokens, among others. The affected versions relied on ...
PT-2024-37131
Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository versions 3.0.0 through 3.72.0 Description: A Use of Hard-coded Credentials vulnerability has been discovered in the code responsible for encrypting secrets stored in the Nexus Repository configuration database, such ...
Sonatype Nexus Repository security vulnerabilities
Sonatype Nexus Repository is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.72.0 that stems from the use of hard-coded credentials...
CVE-2024-5764: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database SMTP or HTTP proxy credentials, user tokens, tokens, among others. The affected versions relied on ...
Sonatype Nexus Repository Manager Path Traversal
The vulnerability of Sonatype Nexus Repository Manager is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
Exploit for CVE-2024-4956
CVE-2024-4956 !My Shophttps://img.shields.io/badge/My%20S...
Exploit for CVE-2024-4956
CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Ne...
Exploit for CVE-2024-4956
CVE-2024-4956 : Nexus Repository Manager 3 Dork: - Shodan:...
Nexus Repository 3.x < 3.68.1 Path Traversal
Nexus Repository version 3.x prior to 3.68.1 is affected by a Path Traversal allowing an attacker to create a URL returning any file for download, including system files outside the scope of the Nexus Repository application, without any authentication. No source data...
Path Traversal Vulnerability in Sonatype Nexus Repository
Nexus Repository Manager is a repository management system. A path traversal vulnerability exists in Sonatype Nexus Repository Manager that can be exploited by an attacker to obtain sensitive information...
Exploit for CVE-2024-4956
CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Reposi...
Exploit for CVE-2024-4956
CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Reposi...
Exploit for CVE-2024-4956
CVE-2024-4956 Nexus Reposito...
Exploit for CVE-2024-4956
CVE-2024-4956 Nexus Reposito...
PT-2024-9210 · Sonatype · Sonatype Nexus Repository 2
Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository 2 versions up to and including 2.15.1 Description: A stored Cross-site Scripting vulnerability has been discovered, which affects the structure of web pages. This issue may allow a remote attacker to perform cross-si...
PT-2024-9211 · Sonatype · Sonatype Nexus Repository
Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository 2 versions up to and including 2.15.1 Description: A Remote Code Execution issue has been discovered, related to incorrect code generation management. This allows a remote attacker to execute arbitrary code by...
CVE-2024-4956
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1...
CVE-2024-4956 Nexus Repository 3 - Path Traversal
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1...
CVE-2024-4956
Sonatype Nexus Repository Manager 3 (versions 3.0 to 3.68.0) is vulnerable to an unauthenticated path traversal vulnerability. An attacker can craft a malicious URL to download sensitive system files , such as /etc/passwd, from outside the application's scope. This vulnerability has been addresse...
