CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Exécution de code à distance sans authentification dans Nexus Repository Manager 3 | | \ / | | / /| | | || | / / / / / / | | | / || | |/ || / / // || / / root@kitploit:...

CVE-2019-7238

CVE-2019-7238 Rico Tencent Security Yunding Lab과 @voidfyoo가 발견한 인증 없는 Nexus Repository Manager 3 원격 코드 실행 취약점 3.15.0 상세 분석 영어: https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/ 상세 분석 영어 외: https://xz.aliyun.com/t/4136...

CVE-2020-10199

CVE-2020-10199 Ранее во время пентеста я столкнулся с целевой средой, где был развёрнут Nexus Repository Manager; помучился, но в итоге всё-таки получил Shell. Зафиксирую это здесь, чтобы потом было проще вспомнить, если понадобится. Целевая версия: Sonatype Nexus Repository Manager OSS 3.20.1-01...

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- Полезная нагрузка root@kitploit: PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

CVE-2020-11444

CVE-2020-11444 Script d'exploitation de vulnérabilité d'autorisation insuffisante sur Nexus 3 Autres fichiers de scripts : https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

이 스크립트는 Nexus Repository Manager3 EL 주입CVE-2018-16621 취약점을 대상으로 하며, 원클릭으로 취약점을 이용하여 리버스 셸을 실행합니다. 실행 예시： 공격자 로컬에서 스크립트를 실행하고, 프롬프트에 따라 대상 머신의 IP, 포트와 로컬 리스너 IP, 포트를 입력한 후, 원클릭으로 취약점 익스플로잇 코드를 실행하여 리버스 셸을 획득합니다...

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 Неавторизованный обход пути Потенциально позволяет злоумышленнику читать определенную информацию на шлюзах безопасности Check Point после подключения к Интернету и включения Remote Access VPN или Mobile Access Software Blades. Доступн...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 скрипт удаленного выполнения команд Ещё скрипты см.: https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Dork: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" PoC : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

nmap-scripts

nmap-scripts scripts nmap pour les vulnérabilités cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 Une vulnérabilité d'exécution de code à distance existe dans la manière dont le protocole Microsoft Server Message Block 3.1.1 SMBv3 gère certaines requêtes, également conn...

CVE-2020-10199

Nexus Repository Manager 3 Vuln versions affectées : = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 Exécution de commande à distance POC avec réponse POC sans réponse $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199'...

CVE-2020-10199_POC-EXP

影响版本 + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version + + EXP: python3 cve-2020-10199cmd.py...

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3: неаутентифицированный обход пути...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager предоставляет централизованную платформу для хранения артефактов сборки CVE-2024-4956 представляет собой уязвимость обхода пути path traversal в Sonatype Nexus Repository manager, которая позволяет злоумышленнику...

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Vulnérabilité d'exécution de commandes à distance dans Nexus Repository Manager 2.x】 Nom de la vulnérabilité : Vulnérabilité d'exécution de commandes à distance dans Nexus Repository Manager 2.x Description de la vulnérabilité : Nexus Repository Manager 2.X...

Nexus-Repository-Manager-3-CVE-2020-11444-

Questo repository non contiene un README...

CVE-2024-5082

Panoramica Questo repository contiene un proof of concept in Python per CVE-2024-5082 , una vulnerabilità di esecuzione remota di codice in Sonatype Nexus Repository Manager 2. La vulnerabilità consente a un utente con permessi sufficienti di pubblicare un artefatto Maven appositamente creato e...

CVE-2026-11403

The CVE affects Sonatype Nexus Repository Manager. The flaw is in the format-specific API key generation, where a remote attacker could gain unauthorized access to repository operations as a targeted user if a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token)...

CVE-2026-10741

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials...