Lucene search
+L

265 matches found

Kitploit
Kitploit
added 2026/09/04 7:48 p.m.8 views

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 удаленное выполнение кода без аутентификации | | \ / | | / /| | | || | / / / / / / | | | / || | |/ || / / // || / / root@kitploit:...

9.8CVSS9AI score0.77146EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/04 3:49 p.m.3 views

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- 페이로드 root@kitploit: PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

9CVSS7.5AI score0.18396EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/04 2:51 p.m.7 views

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 인증되지 않은 경로 탐색 잠재적으로 공격자가 인터넷에 연결되고 Remote Access VPN 또는 Mobile Access Software Blades가 활성화된 Check Point Security Gateways에서 특정 정보를 읽을 수 있습니다. 이 취약점을 완화하는 보안 수정을 사용할 수 있습니다. 관련 정보 읽기 — CVE-2024-4956 면책 조항 : 이 개념 증명POC은 교육 및 윤리적 테스트 목적으...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/04 11:58 a.m.5 views

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 원격 명령 실행 스크립트 더 많은 스크립트 파일은 다음을 참조하십시오: https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

9CVSS7.3AI score0.38166EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/04 11:47 a.m.6 views

CVE-2020-11444

CVE-2020-11444 Nexus 3 권한 우회 취약점 악용 스크립트 더 많은 스크립트 파일은 다음 참조: https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-11444 Nexus 3...

8.8CVSS8.1AI score0.08508EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/04 9:46 a.m.8 views

CVE-2024-5082

Обзор Этот репозиторий содержит Python-доказательство концепции для CVE-2024-5082 , уязвимости удаленного выполнения кода в Sonatype Nexus Repository Manager 2. Уязвимость позволяет пользователю с достаточными правами опубликовать специально сформированный Maven-артефакт и пометить его для...

7.1CVSS7.5AI score0.01943EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 9:27 a.m.4 views

CVE-2020-10199

Nexus Repository Manager 3 Vuln 영향 버전: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 원격 코드 명령 실행 응답 PoC 응답 없는 PoC $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' 일반 사용자 권한 root@kitploit:...

9CVSS7.7AI score0.99064EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/04 9:16 a.m.8 views

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Дорк: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" PoC : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/04 3:13 a.m.8 views

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 인증되지 않은 경로 탐색...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/04 1:41 a.m.6 views

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/03 11:38 p.m.5 views

CVE-2019-7238

CVE-2019-7238 Rico Tencent Security Yunding Lab과 @voidfyoo가 발견한 인증 없는 Nexus Repository Manager 3 원격 코드 실행 취약점 3.15.0 상세 분석 영어: https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/ 상세 분석 영어 외: https://xz.aliyun.com/t/4136...

9.8CVSS9AI score0.77146EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/02 7:00 p.m.8 views

CVE-2020-10199

CVE-2020-10199 以前、PTの際に、対象環境にNexus Repository Managerが構築されていることに遭遇し、いくつか壁にぶつかりながらも最終的にShellを取得できました。 少し記録を残しておくと、今後使うときに振り返りやすくなります。 対象バージョン: Sonatype Nexus Repository Manager OSS 3.20.1-01 PoC を使って Code Execution をテストし、脆弱性の存在を確認しました。(注: この時点ではログインセッションでした。対象環境のデフォルトクレデンシャルの問題を偶然発見したためです)...

9CVSS8.3AI score0.99064EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/02 10:44 a.m.4 views

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

Этот скрипт нацелен на уязвимость EL-инъекции в Nexus Repository Manager 3 CVE-2018-16621 для однокликового выполнения эксплойта с получением обратной оболочки reverse shell Пример запуска: Запустите скрипт на атакующей машине, следуя подсказкам, введите IP и порт цели, а также IP и порт...

7.2CVSS7.6AI score0.05097EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 9:38 a.m.9 views

nmap-scripts

nmap-scripts cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 취약점을 위한 nmap 스크립트 CVE-2020-0796 Microsoft Server Message Block 3.1.1SMBv3 프로토콜이 특정 요청을 처리하는 방식에 원격 코드 실행 취약점이 존재하며, 일명 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'라고 합니다. CVE-2019-7238 Sonatype Nexus...

10CVSS9AI score0.9981EPSS
SaveExploits143
Kitploit
Kitploit
added 2026/09/02 4:56 a.m.9 views

CVE-2020-10199_POC-EXP

Затронутые версии + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version = 3.21.1 + +----------------------------------------------------------------------------------------------------------+ EX...

9CVSS8.4AI score0.99064EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/02 2:43 a.m.7 views

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager 는 빌드 아티팩트를 저장하기 위한 중앙 플랫폼을 제공합니다. CVE-2024-4956 는 Sonatype Nexus Repository Manager의 경로 탐색 취약점으로, 공격자가 인증 없이 Nexus Repository 애플리케이션 범위 밖의 시스템 파일을 포함한 임의의 파일을 다운로드로 반환하는 URL을 조작할 수 있게 합니다. 영향받는 버전 : Sonatype Nexus...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/31 1:57 p.m.4 views

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x 원격 명령 실행 취약점】 취약점 이름: Nexus Repository Manager 2.x 원격 명령 실행 취약점 취약점 설명: Nexus Repository Manager 2.X에는 원격 명령 실행 취약점이 존재하며, 이 취약점은 기본적으로 배포 권한 계정이 존재합니다. 성공적으로 로그인한 후 "createrepo" 또는 "mergerepo" 사용자 정의 구성을 사용하여 원격 명령 실행 취약점을 트리거할 수...

9CVSS7.5AI score0.18396EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/29 4:34 p.m.3 views

Nexus-Repository-Manager-3-CVE-2020-11444-

Questo repository non contiene un README...

8.8CVSS7.2AI score0.08508EPSS
SaveExploits2
CVE
CVE
added 2026/07/14 3:28 p.m.33 views

CVE-2026-11403

The CVE affects Sonatype Nexus Repository Manager. The flaw is in the format-specific API key generation, where a remote attacker could gain unauthorized access to repository operations as a targeted user if a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token)...

8.7CVSS6.1AI score0.00542EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/17 8:16 p.m.18 views

CVE-2026-10741

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials...

5.9CVSS0.0027EPSS
SaveExploits0References2
Rows per page
Query Builder