Lucene search
+L

265 matches found

Kitploit
Kitploit
added 2026/09/02 12:35 p.m.3 views

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- Payload root@kitploit: PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

9CVSS7.1AI score0.18396EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/02 11:04 a.m.5 views

CVE-2020-11444

CVE-2020-11444 Nexus 3 Unauthorized Access Exploit Script For more exploit scripts, see: https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub...

8.8CVSS7.2AI score0.08508EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/02 10:44 a.m.4 views

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

This script targets the Nexus Repository Manager 3 EL injection vulnerability CVE-2018-16621, and performs one-click exploitation to get a reverse shell. Running Example: Run the script on the attacker machine, enter the target IP, port, local listener IP and port as prompted, then execute the...

7.2CVSS7.1AI score0.05097EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 10:43 a.m.7 views

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with Remote Access VPN or Mobile Access Software Blades. A securit...

7.5CVSS7.1AI score0.18245EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/02 10:26 a.m.5 views

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Remote Command Execution Script More script files at: https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

9CVSS7.1AI score0.38166EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/02 9:46 a.m.8 views

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Dork: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" Poc : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

7.5CVSS7.1AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/02 9:38 a.m.9 views

nmap-scripts

nmap-scripts 用于漏洞 cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 的 nmap 脚本 CVE-2020-0796 Microsoft 服务器消息块 3.1.1 SMBv3 协议处理某些请求的方式中存在一个远程代码执行漏洞,又称"Windows SMBv3 客户端/服务器远程代码执行漏洞"。 CVE-2019-7238 Sonatype Nexus Repository Manager 3.15.0 之前版本存在不正确的访问控制。 CVE-2019-11580 Atlassian Crowd 和...

10CVSS7.2AI score0.9981EPSS
SaveExploits143
Kitploit
Kitploit
added 2026/09/02 8:42 a.m.4 views

CVE-2020-10199

Nexus Repository Manager 3 Vuln Affected versions: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 Remote Code Execution Echo PoC No Echo PoC $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' Normal User Privileges...

9CVSS7.1AI score0.99064EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/02 4:56 a.m.8 views

CVE-2020-10199_POC-EXP

Affected versions + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version use...

9CVSS7.4AI score0.99064EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/02 3:29 a.m.8 views

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 Unauthenticated Path Traversal...

7.5CVSS7.1AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/02 2:43 a.m.5 views

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager 提供了一个用于存储构建产物的集中式平台 CVE-2024-4956 是 Sonatype Nexus Repository Manager 中的一个路径遍历漏洞,攻击者无需任何身份验证即可构造 URL,将任意文件(包括 Nexus Repository 应用范围之外的系统文件)作为下载返回。 受影响版本 :所有 3.68.0 及之前的 Sonatype Nexus Repository 3.x OSS/Pro 版本 Pytho...

7.5CVSS7.1AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/02 1:29 a.m.8 views

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 远程代码执行 Nexus Repository Manager 3 无需身份验证的远程代码执行 版本 nexus root@kitploit: 关于命令回显: functionx, y, z, c, integer, defineClass c=1.class.forName'java.lang.Character'; integer=1.class;...

9.8CVSS7.4AI score0.77146EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/02 12:42 a.m.6 views

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/01 8:31 p.m.4 views

CVE-2019-7238

CVE-2019-7238 Rico Tencent Security Yunding Lab と @voidfyoo によって発見された、Nexus Repository Manager 3(3.15.0 未満)の認証なしリモートコード実行。 詳細な分析(英語): https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/ 詳細な分析(英語以外): https://xz.aliyun.com/t/4136...

9.8CVSS7.4AI score0.77146EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/31 1:57 p.m.4 views

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Command Execution Vulnerability】 Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...

9CVSS7.1AI score0.18396EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/29 4:34 p.m.3 views

Nexus-Repository-Manager-3-CVE-2020-11444-

Questo repository non contiene un README...

8.8CVSS7.2AI score0.08508EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/28 6:36 p.m.6 views

CVE-2020-10199

CVE-2020-10199 Prima, durante un PT penetration test, mi sono imbattuto in un ambiente target con un Nexus Repository Manager installato; dopo alcuni intoppi sono comunque riuscito a ottenere una shell. Ho deciso di documentare l'accaduto, così in futuro sarà più semplice rivedere i passaggi...

9CVSS7.3AI score0.99064EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/28 11:14 a.m.7 views

CVE-2024-5082

Panoramica Questo repository contiene un proof of concept in Python per CVE-2024-5082 , una vulnerabilità di esecuzione remota di codice in Sonatype Nexus Repository Manager 2. La vulnerabilità consente a un utente con permessi sufficienti di pubblicare un artefatto Maven appositamente creato e...

7.1CVSS7.1AI score0.01943EPSS
SaveExploits1
CVE
CVE
added 2026/07/14 3:28 p.m.32 views

CVE-2026-11403

The CVE affects Sonatype Nexus Repository Manager. The flaw is in the format-specific API key generation, where a remote attacker could gain unauthorized access to repository operations as a targeted user if a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token)...

8.7CVSS6.1AI score0.00542EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/17 8:16 p.m.17 views

CVE-2026-10741

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials...

5.9CVSS0.0027EPSS
SaveExploits0References2
Rows per page
Query Builder