315 matches found
Nacos <1.4.1 - Authentication Bypass
This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...
nacos-cve-2021-29441
This repository does not have a README...
Alibab-Nacos-Unauthorized-Login
Vuln Impact An issue has been discovered in Nacos affecting Nacos = 2.1.0.Nacos users use the default JWT key to cause an unauthorized access vulnerability. Through this vulnerability, attackers can bypass user name and password authentication and directly log in to the Nacos user Vuln Product...
PocList
This project is temporarily paused. During later updates, I realized two issues: First, it seems my declaration of the Cybersecurity Law in the repository was insufficient, leading to some results I did not intend. Second, at the initial design stage of this project, I did not consider some...
alibaba__nacos_CVE-2021-44667_2-0-3
Nacos: Dynamic Na ming and Co nfiguration S ervice What does it do Nacos official site: nacos.io is an easy-to-use platform designed for dynamic service discovery and configuration and service management. It helps you to build cloud native applications and microservices platform easily. Service i...
CVE-2021-29441
CVE-2021-29441 Usage: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...
Alibab-Nacos-Unauthorized-Reset-PWD
Vuln Impact An issue has been discovered in Nacos affecting Nacos = 2.2.0. When a user uses the default JWT Key, it will cause an attacker to reset the password of any user and take over the user account. Vuln Product Nacos = 2.2.0 version Vulnerability reappearance Step 1：Get username can use ol...
Spring-Cloud-Gateway-Nacos
This repository does not have a README...
QVD-2024-26473
QVD-2024-26473 QVD-2024-26473 && CVE-2021-29442 FOFA Search: https://fofa.info/result?qbase64=YXBwPSJOYWNvcyI%3D ZoomEye Search: https://www.zoomeye.org/searchResult?q=app%3A%22Alibaba%20Nacos%22...
cve-2021-29442-Nacos-Derby-rce-exp
Introduction Nacos Derby command execution vulnerability exploitation script, by default uses User-Agent bypass to exploit the vulnerability Nacos is an open-source platform for service registration, discovery, and configuration management. In its early versions ≤2.4.0-BETA, Nacos integrates Apac...
CVE-2021-29441
CVE-2021-29441 Run: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...
Nacos <1.4.1 - Authentication Bypass
Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...
cc.chensoul.nacos:core-test (2.5.2), cc.chensoul.nacos:nacos-address (2.5.2) +374 more potentially affected by CVE-2026-93446 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.90, <=9.0.122)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.90, =2.4.0, =0.0.6, =0.0.7 and more Source cves: CVE-2026-93446 Source advisory: MEND:CVE-2026-93446...
cc.chensoul.nacos:core-test (2.5.2), cc.chensoul.nacos:nacos-address (2.5.2) +346 more potentially affected by CVE-2026-88041 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.93, <=9.0.122)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.93, =2.4.0, =0.0.6, =0.0.7 and more Source cves: CVE-2026-88041 Source advisory: MEND:CVE-2026-88041...
Nacos 1.4.0 User-Agent Authentication Bypass
Nacos version 1.4.0 contains an authentication bypass where a spoofed Nacos-Server User-Agent permits access to protected user-management API endpoints. The proof of concept checks the condition and adds a user. https://packetstorm.news/download/234997...
Exploit for Authentication Bypass by Spoofing in Alibaba Nacos
Nacos User-Agent Authentication Bypass CVE-2021-29441 Vulh...
CVE-2021-29441
CVE-2021-29441 - Nacos 인증 우회 CVE-2021-29441 는 Nacos 버전 1.4.1 미만에 영향을 미치는 치명적인 인증 우회 취약점입니다. Nacos는 클라우드 네이티브 환경에서 사용되는 동적 서비스 검색, 구성 관리 및 서비스 관리를 위한 인기 있는 플랫폼입니다. 이 취약점으로 인해 인증되지 않은 공격자가 인증 제어를 우회하고 취약한 Nacos 서버에서 관리 작업을 수행할 수 있습니다. 취약점 상세 정보 필드| 값 ---|--- CVE| CVE-2021-29441 심각도| 심각 CVSS v3.1| 9...
CVE-2022-40087
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71968 2026-09-01 20:01:20+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:35+00:00| seen| https://t.me/hackingAttack/71970 2026-09-02 01:01:36+00:00| seen|...