CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- Payload root@kitploit: PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

CVE-2020-11444

CVE-2020-11444 Script de explotación de la vulnerabilidad de acceso no autorizado en Nexus 3 Para más scripts, consulte: https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 원격 명령 실행 스크립트 더 많은 스크립트 파일은 다음을 참조하십시오: https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with Remote Access VPN or Mobile Access Software Blades. A securit...

CVE-2020-10199

Vulnerabilidad de Nexus Repository Manager 3 Versiones afectadas: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199: Ejecución remota de comandos PoC con respuesta PoC sin respuesta $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch...

nmap-scripts

nmap-scripts scripts nmap para as vulnerabilidades CVE-2020-0796 & CVE-2019-7238 & CVE-2019-11580 & CVE-2017-6327 CVE-2020-0796 Existe uma vulnerabilidade de execução remota de código na forma como o protocolo Microsoft Server Message Block 3.1.1 SMBv3 lida com certas requisições, conhecida como...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 无需认证的远程代码执行漏洞，影响版本 3.15.0，由 Rico 腾讯安全云鼎实验室和 @voidfyoo 发现 详细分析（英文）： https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/ 详细分析（非英文）： https://xz.aliyun.com/t/4136...

CVE-2020-10199_POC-EXP

Versões afetadas + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version = 3.21.1 + +----------------------------------------------------------------------------------------------------------+ EXP...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

يستهدف هذا البرنامج النصي ثغرة حقن EL في Nexus Repository Manager3 CVE-2018-16621، وينفّذ استغلال الثغرة بضغطة واحدة للحصول على شل عكسي مثال التشغيل: قم بتشغيل البرنامج النصي محليًا على جهاز المهاجم، وأدخل IP الجهاز الهدف والمنفذ وIP الاستماع المحلي والمنفذ وفقًا للمطالبات، وبعدها نفّذ كود استغلا...

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Дорк: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" PoC : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x दूरस्थ कमांड निष्पादन भेद्यता】 भेद्यता का नाम: Nexus Repository Manager 2.x दूरस्थ कमांड निष्पादन भेद्यता भेद्यता विवरण: Nexus Repository Manager 2.X में एक दूरस्थ कमांड निष्पादन भेद्यता मौजूद है। इस भेद्यता में डिफ़ॉल्ट रूप से...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 Remote Code Execution ohne Authentifizierung | | \ / | | / /| | | || | / / / / / / | | | / || | |/ || / / // || / / root@kitploit:...

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

CVE-2024-5082

Übersicht Dieses Repository enthält einen Python Proof of Concept für CVE-2024-5082 , eine Schwachstelle zur Remote-Code-Ausführung in Sonatype Nexus Repository Manager 2. Die Schwachstelle erlaubt einem Benutzer mit ausreichenden Berechtigungen, ein speziell präpariertes Maven-Artefakt zu...

CVE-2020-10199

CVE-2020-10199 Prima, durante un PT penetration test, mi sono imbattuto in un ambiente target con un Nexus Repository Manager installato; dopo alcuni intoppi sono comunque riuscito a ottenere una shell. Ho deciso di documentare l'accaduto, così in futuro sarà più semplice rivedere i passaggi...

Nexus-Repository-Manager-3-CVE-2020-11444-

Questo repository non contiene un README...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager O Sonatype Nexus Repository Manager fornece uma plataforma central para armazenar artefatos de build CVE-2024-4956 é uma vulnerabilidade de travessia de caminho path traversal no Sonatype Nexus Repository Manager que permite a um atacante criar uma...

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 Nicht authentifizierter Pfad-Traversal...

CVE-2026-11403

The CVE affects Sonatype Nexus Repository Manager. The flaw is in the format-specific API key generation, where a remote attacker could gain unauthorized access to repository operations as a targeted user if a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token)...

CVE-2026-10741

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials...