CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 تنفيذ كود عن بُعد بدون مصادقة 3.15.0 اكتشفه Rico Tencent Security Yunding Lab و @voidfyoo تحليل مفصّل بالإنجليزية: https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/ تحليل مفصّل بغير...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Exécution de code à distance sans authentification dans Nexus Repository Manager 3 | | \ / | | / /| | | || | / / / / / / | | | / || | |/ || / / // || / / root@kitploit:...

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- Payload root@kitploit: PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Traversée de chemin non authentifiée de Nexus Repository Manager 3 Permettant potentiellement à un attaquant de lire certaines informations sur les Check Point Security Gateways une fois connectés à Internet et activés avec Remote Access VPN ou Mobile Access...

CVE-2020-11444

CVE-2020-11444 Nexus 3 अनधिकृत भेद्यता शोषण स्क्रिप्ट अधिक स्क्रिप्ट फ़ाइलों के लिए देखें: https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exph...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 سكريبت تنفيذ الأوامر عن بعد لمزيد من ملفات السكريبتات، راجع: https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

CVE-2024-4956

CVE-2024-4956 : مدير مستودع Nexus 3 استعلامات: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" إثبات الاختراق: root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

CVE-2020-10199

Nexus Repository Manager 3 भेद्यता प्रभावित संस्करण: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 दूरस्थ कोड कमांड निष्पादन इको poc गैर-इको poc $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' सामान्य उपयोगकर्ता अनुमति...

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 اجتياز المسار غير المصادق عليه...

CVE-2020-10199

CVE-2020-10199 Lors d'un précédent test d'intrusion, l'environnement cible comportait un Nexus Repository Manager. J'ai trébuché sur quelques obstacles, mais j'ai fini par obtenir un shell. Je vais documenter ça rapidement pour pouvoir m'y référer plus facilement à l'avenir. Version cible :...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

Ce script cible la vulnérabilité d'injection EL dans Nexus Repository Manager 3 CVE-2018-16621, exécution en un clic de l'exploit pour obtenir un shell inverse. Exemple d'exécution : Exécutez le script localement sur la machine attaquante, saisissez l'IP et le port de la cible, ainsi que l'IP et ...

nmap-scripts

nmap-scripts سكربتات nmap لثغرات cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 توجد ثغرة تنفيذ تعليمات برمجية عن بُعد في الطريقة التي يعالج بها بروتوكول Microsoft Server Message Block 3.1.1 SMBv3 طلبات معيّنة، وتُعرف أيضًا باسم 'Windows SMBv3 Client/Server Remote Code...

CVE-2020-10199_POC-EXP

الإصدارات المتأثرة + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version usernam...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager يوفر منصة مركزية لتخزين مخرجات البناء CVE-2024-4956 هي ثغرة اجتياز المسار في Sonatype Nexus Repository Manager، تتيح للمهاجم صياغة عنوان URL لإرجاع أي ملف كتنزيل، بما في ذلك ملفات النظام خارج نطاق تطبيق Nexus...

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x दूरस्थ कमांड निष्पादन भेद्यता】 भेद्यता का नाम: Nexus Repository Manager 2.x दूरस्थ कमांड निष्पादन भेद्यता भेद्यता विवरण: Nexus Repository Manager 2.X में एक दूरस्थ कमांड निष्पादन भेद्यता मौजूद है। इस भेद्यता में डिफ़ॉल्ट रूप से...

Nexus-Repository-Manager-3-CVE-2020-11444-

Questo repository non contiene un README...

CVE-2024-5082

Panoramica Questo repository contiene un proof of concept in Python per CVE-2024-5082 , una vulnerabilità di esecuzione remota di codice in Sonatype Nexus Repository Manager 2. La vulnerabilità consente a un utente con permessi sufficienti di pubblicare un artefatto Maven appositamente creato e...

CVE-2026-11403

The CVE affects Sonatype Nexus Repository Manager. The flaw is in the format-specific API key generation, where a remote attacker could gain unauthorized access to repository operations as a targeted user if a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token)...

CVE-2026-10741

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials...