CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Script per l'esecuzione remota di comandi Per altri script, vedere anche: https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- Payload root@kitploit: PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 Nicht authentifizierte Path Traversal Ermöglicht es einem Angreifer potenziell, bestimmte Informationen auf Check Point Security Gateways zu lesen, sobald diese mit dem Internet verbunden und mit Remote Access VPN oder Mobile Access...

CVE-2020-11444

CVE-2020-11444 Script di exploit per la vulnerabilità di autorizzazione impropria di Nexus 3 Per altri script, vedere: https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

CVE-2020-10199

Nexus Repository Manager 3 Vuln versioni interessate: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 Esecuzione remota di comandi POC con output POC senza output $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' Privilegi...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 Esecuzione Remota di Codice senza autenticazione | | \ / | | / /| | | || | / / / / / / | | | / || | |/ || / / // || / / root@kitploit:...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 Remote Code Execution ohne Authentifizierung 3.15.0 entdeckt von Rico Tencent Security Yunding Lab und @voidfyoo Detaillierte Analyse englisch:...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager bietet eine zentrale Plattform zur Speicherung von Build-Artefakten. CVE-2024-4956 ist eine Pfad-Traversal-Schwachstelle im Sonatype Nexus Repository Manager, die es einem Angreifer ermöglicht, eine URL zu erstellen...

CVE-2020-10199

CVE-2020-10199 Prima, durante un PT penetration test, mi sono imbattuto in un ambiente target con un Nexus Repository Manager installato; dopo alcuni intoppi sono comunque riuscito a ottenere una shell. Ho deciso di documentare l'accaduto, così in futuro sarà più semplice rivedere i passaggi...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

Questo script sfrutta la vulnerabilità di injection EL di Nexus Repository Manager 3 CVE-2018-16621 e consente di eseguire l'exploit con un solo comando per ottenere una reverse shell. Esempio di esecuzione: Esegui lo script localmente sulla macchina dell'attaccante e, seguendo le istruzioni,...

CVE-2024-5082

Panoramica Questo repository contiene un proof of concept in Python per CVE-2024-5082 , una vulnerabilità di esecuzione remota di codice in Sonatype Nexus Repository Manager 2. La vulnerabilità consente a un utente con permessi sufficienti di pubblicare un artefatto Maven appositamente creato e...

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Dork: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" Poc : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

nmap-scripts

nmap-scripts nmap-Skripte für Schwachstellen cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 Eine Sicherheitslücke zur Remotecodeausführung Remote Code Execution existiert in der Art und Weise, wie das Microsoft Server Message Block 3.1.1 SMBv3-Protokoll bestimmte...

CVE-2020-10199_POC-EXP

Versione interessata + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version = 3.21.1 + +----------------------------------------------------------------------------------------------------------+...

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Code Execution Vulnerability】 Schwachstellenname: Nexus Repository Manager 2.x Remote Code Execution Vulnerability Schwachstellenbeschreibung: Nexus Repository Manager 2.X weist eine Remote-Code-Execution-Schwachstelle auf...

Nexus-Repository-Manager-3-CVE-2020-11444-

Questo repository non contiene un README...

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 Nicht authentifizierter Pfad-Traversal...

CVE-2026-11403

The CVE affects Sonatype Nexus Repository Manager. The flaw is in the format-specific API key generation, where a remote attacker could gain unauthorized access to repository operations as a targeted user if a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token)...

CVE-2026-10741

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials...