Lucene search
+L

265 matches found

Kitploit
Kitploit
added 2026/09/06 3:56 a.m.8 views

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 未认证路径遍历...

7.5CVSS7.6AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/06 12:54 a.m.5 views

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 无需认证的远程代码执行漏洞,影响版本 3.15.0,由 Rico 腾讯安全云鼎实验室和 @voidfyoo 发现 详细分析(英文): https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/ 详细分析(非英文): https://xz.aliyun.com/t/4136...

9.8CVSS8.4AI score0.77146EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/05 10:52 p.m.7 views

CVE-2024-4956-PoC

title="Nexus 仓库管理器" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

7.5CVSS7.5AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/05 5:28 p.m.8 views

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 远程代码执行 Nexus Repository Manager 3 无需身份验证的远程代码执行 版本 | | \ / | | / /| | | || | / / / / / / | | | / || | |/ || / / // || / / root@kitploit: Nexus RCE 3.15.0 Python By jas502n python CVE-2019-7238.py http://10.10.20.166:8081 whoami...

9.8CVSS8.5AI score0.77146EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/05 4:34 p.m.3 views

Nexus-Repository-Manager-3-CVE-2020-11444-

此存储库没有 README。...

8.8CVSS7.7AI score0.08508EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/05 4:33 p.m.3 views

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- Payload root@kitploit: PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

9CVSS7.7AI score0.17268EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/05 1:14 p.m.8 views

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 未经身份验证的路径遍历 攻击者可能能够在连接到互联网并启用 Remote Access VPN 或 Mobile Access Software Blades 后,读取 Check Point Security Gateways 上的某些信息。目前已有可缓解此漏洞的安全修复程序。 了解更多 — CVE-2024-4956 免责声明...

7.5CVSS7.5AI score0.18245EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/05 12:49 p.m.6 views

CVE-2020-11444

CVE-2020-11444 Nexus 3 越权漏洞利用脚本 更多脚本文件另参:https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-11444 Nexus 3 Unauthorized Vuln...

8.8CVSS7.8AI score0.08508EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/05 12:38 p.m.5 views

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 远程命令执行脚本 更多脚本文件另参:https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-10204 Nexus...

9CVSS7.6AI score0.38166EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/05 12:29 p.m.8 views

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 搜索语法: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" Poc : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

7.5CVSS7.7AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/05 7:06 a.m.5 views

CVE-2020-10199

Nexus Repository Manager 3 Vuln Affected versions: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 Remote Code Execution Echo PoC No Echo PoC $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' Normal User Privileges...

9CVSS7.7AI score0.99064EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/04 9:46 a.m.8 views

CVE-2024-5082

Overview This repository contains a Python proof of concept for CVE-2024-5082 , a remote code execution vulnerability in Sonatype Nexus Repository Manager 2. The vulnerability allows a user with sufficient permission to publish a specially crafted Maven artifact and mark it for processing by the...

7.1CVSS7.5AI score0.01943EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 7:00 p.m.8 views

CVE-2020-10199

CVE-2020-10199 Anteriormente, durante una prueba de penetración PT, me encontré con que el entorno objetivo tenía desplegado Nexus Repository Manager. Pasé por algunos obstáculos, pero al final conseguí la shell. Hago un pequeño registro para poder repasarlo fácilmente en el futuro si es necesari...

9CVSS8.3AI score0.99064EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/02 10:44 a.m.4 views

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

本脚本针对Nexus Repository Manager3 EL注入(CVE-2018-16621)漏洞,一键执行漏洞利用反弹shell 运行示例: 在攻击机本地运行脚本,根据提示输入靶机ip、端口、本机监听ip、端口,之后即可一键执行漏洞利用代码,GET反弹Shell。...

7.2CVSS7.6AI score0.05097EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 9:38 a.m.10 views

nmap-scripts

nmap-scripts 用于漏洞 cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 的 nmap 脚本 CVE-2020-0796 Microsoft 服务器消息块 3.1.1 SMBv3 协议处理某些请求的方式中存在一个远程代码执行漏洞,又称"Windows SMBv3 客户端/服务器远程代码执行漏洞"。 CVE-2019-7238 Sonatype Nexus Repository Manager 3.15.0 之前版本存在不正确的访问控制。 CVE-2019-11580 Atlassian Crowd 和...

10CVSS9AI score0.9981EPSS
SaveExploits143
Kitploit
Kitploit
added 2026/09/02 4:56 a.m.10 views

CVE-2020-10199_POC-EXP

影响版本 + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version + + EXP: python3 cve-2020-10199cmd.py http://127.0.0.1:8081 admin admin...

9CVSS8.4AI score0.99064EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/02 2:43 a.m.7 views

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager proporciona una plataforma central para almacenar artefactos de compilación CVE-2024-4956 es una vulnerabilidad de path traversal en Sonatype Nexus Repository manager que permite a un atacante manipular una URL para...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/31 1:57 p.m.5 views

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Command Execution Vulnerability】 Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...

9CVSS7.5AI score0.17268EPSS
SaveExploits5
CVE
CVE
added 2026/07/14 3:28 p.m.34 views

CVE-2026-11403

The CVE affects Sonatype Nexus Repository Manager. The flaw is in the format-specific API key generation, where a remote attacker could gain unauthorized access to repository operations as a targeted user if a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token)...

8.7CVSS6.1AI score0.00542EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/17 8:16 p.m.18 views

CVE-2026-10741

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials...

5.9CVSS0.0027EPSS
SaveExploits0References2
Rows per page
Query Builder