151 matches found
Spring-Cloud-Gateway-Nacos
This repository does not have a README...
nacos-cve-2021-29441
This repository does not have a README...
CVE-2021-29441
CVE-2021-29441 Run: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...
Nacos <1.4.1 - Authentication Bypass
Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...
Nacos <1.4.1 - Authentication Bypass
This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...
CVE-2021-29441
CVE-2021-29441 - Nacos Authentication Bypass CVE-2021-29441 is a critical authentication bypass vulnerability affecting Nacos versions prior to 1.4.1. Nacos is a popular platform for dynamic service discovery, configuration management, and service administration used within cloud-native...
cve-2021-29442-Nacos-Derby-rce-exp
Introduzione Script per lo sfruttamento della vulnerabilità di esecuzione di comandi Derby di Nacos, che per impostazione predefinita aggira la vulnerabilità tramite l'User-Agent. Nacos è una piattaforma open source per la registrazione dei servizi, la discovery e la gestione delle configurazioni...
QVD-2024-26473
QVD-2024-26473 QVD-2024-26473 && CVE-2021-29442 FOFA Suche: https://fofa.info/result?qbase64=YXBwPSJOYWNvcyI%3D ZoomEye Suche: https://www.zoomeye.org/searchResult?q=app%3A%22Alibaba%20Nacos%22...
Alibab-Nacos-Unauthorized-Reset-PWD
Impatto della vulnerabilità È stato scoperto un problema in Nacos che interessa Nacos = 2.2.0. Quando un utente usa la chiave JWT predefinita, un attaccante può reimpostare la password di qualsiasi utente e prendere il controllo dell'account. Prodotto vulnerabile Versione Nacos = 2.2.0 Riproduzio...
Alibab-Nacos-Unauthorized-Login
Impatto della vulnerabilità È stato scoperto un problema in Nacos che interessa Nacos = 2.1.0. Gli utenti di Nacos utilizzano la chiave JWT predefinita, causando una vulnerabilità di accesso non autorizzato. Attraverso questa vulnerabilità, gli aggressori possono aggirare l'autenticazione con nom...
alibaba__nacos_CVE-2021-44667_2-0-3
Nacos: il S ervice dinamico di Na ming e Co nfiguration...
CVE-2021-29441
CVE-2021-29441 Executar: CVE-2021-29441.exe ip Alibaba Nacos — adição de conta sem autorização...
PocList
यह परियोजना अस्थायी रूप से अद्यतन करना बंद कर दी गई है। जब मैं बाद के चरण में अद्यतन कर रहा था, तो मुझे दो समस्याओं का एहसास हुआ: पहली, ऐसा लगता है कि मेरे रिपॉजिटरी में साइबर सुरक्षा कानून के संबंध में मेरा बयान पर्याप्त नहीं था, जिसके कारण कुछ अनपेक्षित परिणाम सामने आए। दूसरी, इस परियोजना के...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: keycloak-fips, airbyte-server, ontop, kafka-bridge, keycloak, knative-kafka-broker-fips, camunda-zeebe, apache-nifi, request-9047-keycloak-fips, nacos, ontop-fips, dependency-track, infinispan, zipkin, apicurio-registry, kafka-bridge-fips, nacos-docker,...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: apache-nifi, apicurio-registry, keycloak-fips, dependency-track-apiserver, request-9047-keycloak-fips, camunda-zeebe, airbyte-server, nacos, apicurio-registry-fips, nacos-docker, dependency-track, infinispan, keycloak, zipkin, airbyte-server-fips...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: keycloak-fips, airbyte-server, ontop, kafka-bridge, keycloak, knative-kafka-broker-fips, camunda-zeebe, apache-nifi, request-9047-keycloak-fips, nacos, ontop-fips, dependency-track, infinispan, zipkin, apicurio-registry, kafka-bridge-fips, nacos-docker,...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: apache-nifi, apicurio-registry, keycloak-fips, dependency-track-apiserver, request-9047-keycloak-fips, camunda-zeebe, airbyte-server, nacos, apicurio-registry-fips, nacos-docker, dependency-track, infinispan, keycloak, zipkin, airbyte-server-fips...
Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation
A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat...
