CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 원격 명령 실행 스크립트 더 많은 스크립트 파일은 다음을 참조하십시오: https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

CVE-2020-11444

CVE-2020-11444 Nexus 3 Unauthorized Access Exploit Script For more exploit scripts, see: https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub...

CVE-2024-5082

개요 이 저장소는 CVE-2024-5082 에 대한 Python 개념 증명PoC을 포함하고 있습니다. 이는 Sonatype Nexus Repository Manager 2의 원격 코드 실행 취약점입니다. 이 취약점은 충분한 권한을 가진 사용자가 특수하게 조작된 Maven 아티팩트를 게시하고 Velocity 콘텐츠 생성기가 처리하도록 표시할 수 있게 합니다. 아티팩트를 검색하면 포함된 Velocity 템플릿이 Nexus에 의해 평가되어 Nexus JVM의 보안 컨텍스트에서 명령을 실행할 수 있습니다. Sonatype에 따르면:...

CVE-2020-10199

Nexus Repository Manager 3 Vuln Affected versions: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 Remote Code Execution Echo PoC No Echo PoC $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' Normal User Privileges...

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Dork: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" PoC : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 の認証不要のパストラバーサル...

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 Remote Code Execution without authentication 3.15.0 found by Rico Tencent Security Yunding Lab and @voidfyoo Detailed analysis english: https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 인증 없이 원격 코드 실행 | | \ / | | / /| | | || | / / / / / / | | | / || | |/ || / / // || / / root@kitploit: Nexus RCE 3.15.0 Python By jas502n python CVE-2019-7238.py http://10.10.20.166:8081 whoami...

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- ペイロード root@kitploit: PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with Remote Access VPN or Mobile Access Software Blades. A securit...

CVE-2020-10199

CVE-2020-10199 以前、PTの際に、対象環境にNexus Repository Managerが構築されていることに遭遇し、いくつか壁にぶつかりながらも最終的にShellを取得できました。 少し記録を残しておくと、今後使うときに振り返りやすくなります。 対象バージョン: Sonatype Nexus Repository Manager OSS 3.20.1-01 PoC を使って Code Execution をテストし、脆弱性の存在を確認しました。（注: この時点ではログインセッションでした。対象環境のデフォルトクレデンシャルの問題を偶然発見したためです）...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

This script targets the Nexus Repository Manager 3 EL injection vulnerability CVE-2018-16621, and performs one-click exploitation to get a reverse shell. Running Example: Run the script on the attacker machine, enter the target IP, port, local listener IP and port as prompted, then execute the...

nmap-scripts

nmap-scripts nmap scripts for vuln cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 SMBv3 protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code...

CVE-2020-10199_POC-EXP

Affected versions + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version use...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager は、ビルド成果物を保存するための中央プラットフォームを提供します。 CVE-2024-4956 は、Sonatype Nexus Repository Manager におけるパストラバーサルの脆弱性です。攻撃者は、認証を一切必要とせずに、Nexus Repository アプリケーションのスコープ外にあるシステムファイルを含む任意のファイルをダウンロードとして返す URL を作成できます。 影響を受けるバージョン :...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Command Execution Vulnerability】 Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...

Nexus-Repository-Manager-3-CVE-2020-11444-

Questo repository non contiene un README...

CVE-2026-11403

The CVE affects Sonatype Nexus Repository Manager. The flaw is in the format-specific API key generation, where a remote attacker could gain unauthorized access to repository operations as a targeted user if a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token)...

CVE-2026-10741

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials...