5492 matches found
CVE-2014-7911-CVE-2014-4322_get_root_privilege
CVE-2014-7911poc 适用于Nexus5 Android 4.4.4KTU8P的本地root利用程序 作者：andy 网站：https://blog.csdn.net/koozxcv 构建方法 将项目导入Eclipse并进行构建。 漏洞信息 http://seclists.org/fulldisclosure/2014/Nov/51 分析...
CVE-2024-4956-PoC
title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...
CVE-2024-4956
CVE-2024-4956 该仓库包含一个用于自动化利用 CVE-2024-4956 的 Python 工具，能够从输入文件中批量测试文件路径，并自动将存在的文件路径内容保存到磁盘以供分析。漏洞详情可参见此处。 用法 root@kitploit: usage: cve-2024-4956.py -h -f FILE -p PROXY -u URL --test -r RELATIVEPATH CVE-2024-4956 Path Traversal Exploit Script options: -h, --help show this help message and exit -f...
Nexus Repository 2 - Remote Code Execution
A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1. id: CVE-2024-5082 info: name: Nexus Repository 2 - Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: hi...
Sonatype Nexus Repository Manager 3 - Remote Code Execution
Sonatype Nexus Repository Manager 3 up to and including 3.21.1 is vulnerable to Expression Language injection. An attacker authenticated with an administrative account can inject an EL expression into the user "roles" field of the coreuiUser update endpoint, leading to remote code execution. This...
CVE-2024-4956
CVE-2024-4956 Nexus Repository Manager 3 未认证路径遍历...
CVE-2024-4956
CVE-2024-4956 : Nexus Repository Manager 3 搜索语法： Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" Poc : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...
CVE-2020-10199-Nexus-3.21.01
CVE-2020-10199-Nexus-3.21.01 Sonatype Nexus 3.21.01 - リモートコード実行 認証済み - 更新版 このバージョンは Alvaro Muñoz 49385 と metasploit nexus exploit に基づいています https://www.exploit-db.com/exploits/49385 ユーザー、パスワード、URL、CMDを変更してください...
CVE-2024-4956
CVE-2024-4956 - Nexus Repository Manager 3 における認証不要のパストラバーサル Nexus Repository Manager は、開発に必要なアーティファクトを整理、保存、配布するリポジトリマネージャーです。 Nexus Repository 3 のバージョン 3.68.1 より前において、パストラバーサルの脆弱性が発見されました。この脆弱性により、攻撃者は認証なしで Nexus Repository アプリケーションの範囲外にあるシステムファイルをダウンロードするための URL...
Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-
このスクリプトは、Nexus Repository Manager3 のELインジェクション（CVE-2018-16621）の脆弱性を対象とし、ワンクリックでエクスプロイトを実行してリバースシェルを取得します。 実行例： 攻撃マシンのローカルでスクリプトを実行し、プロンプトに従ってターゲットマシンのIP、ポート、ローカルのリッスンIP、ポートを入力すると、ワンクリックでエクスプロイトコードが実行され、リバースシェルを取得できます。...
CVE-2026-94031
A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...
cve-2015-1538-1
이 Python 스크립트는 'stsc' 취약점CVE-2015-1538 1이라고도 알려짐을 악용하는 MP4를 생성합니다. 이는 제가 Stagefright 라이브러리에서 보고한 가장 치명적인 취약점 중 하나입니다. 이 익스플로잇의 예상 결과는 미디어 사용자 권한으로의 리버스 셸입니다. 제 Black Hat 및 DEF CON 발표에서 자세히 설명했듯이, 이 사용자는 inet, audio, camera, mediadrm과 같은 여러 그룹에 대한 액세스 권한도 가지고 있습니다. 이러한 그룹을 통해 공격자는 추가 취약점을 악용하지 않고도...
CVE-2026-94031
A command injection vulnerability exists in the nexus_reauth MCP tool of the nexus-mcp project (0-Gaurav-0/nexus-mcp). The child_process.exec function in src/auth/browser.ts fails to properly sanitize the url argument, allowing a remote attacker with low privileges to inject arbitrary commands. T...
CVE-2026-94031 0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection
A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...
EUVD-2026-83747
A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...
shirocrack
shirocrack Golang으로 작성된 Apache Shiro 해시용 간단한 해시 크래커입니다. CVE-2024-4956 악용에 유용합니다. 간단히 정리하자면 CVE-2024-4956은 Sonatype Nexus Repository의 경로 탐색 취약점으로, 인증되지 않은 공격자가 서버에 네트워크 접근 권한만 있으면 경로를 알 경우 시스템에서 임의의 파일을 읽을 수 있습니다. 제가 본 모든 익스플로잇 데모는 /etc/passwd를 가져와서 끝내더군요. 좋긴 하지만, 이 취약점이 받은 심각한 CVSS 점수를 실제로 설명하지는...
Joomla! Portfolio Nexus - Remote File Inclusion
Joomla! Portfolio Nexus 1.5 contains a remote file inclusion vulnerability in the inertialFATE iF comifnexus component that allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2009-4679 info: name: Joomla! Portfol...
Sonatype Nexus Repository Manager 3 - Local File Inclusion
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. id: CVE-2024-4956 info: name: Sonatype Nexus Repository Manager 3 - Local File Inclusion author: ritikchaddha severity: high description: | Path Traversal in Sonatype...