shirocrack

shirocrack Simple cracker de hashes para Apache Shiro escrito en Golang. Útil para explotar CVE-2024-4956. Mantengámoslo breve CVE-2024-4956 es una vulnerabilidad de path traversal en Sonatype Nexus Repository que permite a un atacante no autenticado con acceso de red al servidor leer archivos...

Nexus-Repository-Manager-3-CVE-2020-11444-

Este repositorio no tiene un README...

cve-2015-3839_PoC

cve-2015-3839PoC PoC of cve-2015-3839 which my cause SMS app of Android Crash DoS It worked well on my test devices Nexus 5Android 4.4.4 and Nexus 5Android 5.0.1...

CVE-2026-80854

CVE-2026-80854 affects the Linux kernel USB gadget f_tcm (TCM backend) driver. The root cause is a race condition : usbg_port_unlink() decrements tpg_port_count in the fabric_pre_unlink() callback, before core_dev_del_lun() finishes draining active se_lun references. If the last-LUN unlink overla...

EUVD-2026-71304

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: keep port count until LUN teardown completes tcmusbgdropnexus permits session removal once tpgportcount reaches zero. However, usbgportunlink currently decrements that count from the fabricpreunlink callback,...

CVE-2026-80854 usb: gadget: f_tcm: keep port count until LUN teardown completes

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: keep port count until LUN teardown completes tcmusbgdropnexus permits session removal once tpgportcount reaches zero. However, usbgportunlink currently decrements that count from the fabricpreunlink callback,...

CVE-2024-5082

Overview This repository contains a Python proof of concept for CVE-2024-5082 , a remote code execution vulnerability in Sonatype Nexus Repository Manager 2. The vulnerability allows a user with sufficient permission to publish a specially crafted Maven artifact and mark it for processing by the...

CVE-2019-7238_Nexus_RCE_Tool

Maimentong CVE-2019-7238 Nexus RCE Vulnerability Detection Tool Tool Introduction I wrote this small tool in Java in my spare time. It supports one-click detection of the CVE-2019-7238 vulnerability and execution of system commands, with both GUI and command-line usage. This tool is restricted to...

CVE-2017-8890

CVE-2017-8890 Related documents: ubuntu kernel dual-machine debugging method CVE-2017-8890 Vulnerability Analysis and Exploitation - Overview CVE-2017-8890 Vulnerability Analysis - Principles CVE-2017-8890 Vulnerability Exploitation root ubuntu 16.04@kernel 4.10 CVE-2017-8890 Vulnerability...

nexus-os

Nexus OS El Sistema Operativo de IA Agéntica Gobernado 66 Crates | 675 Comandos | 86 Páginas | 5,229 Pruebas | 10/10 OWASP | Cero Stubs Local-first. Aislable de red. Preparado para post-cuántico. Construido en Rust. Arquitectura | Inicio Rápido | Características | Estado de la Auditoría |...

Vulnerabilities found in Cisco Nexus 9000 Series, iOS XR Software, and Secure Email

Cisco has identified vulnerabilities in Cisco Nexus 9000 Series switches with Silicon One technology, Cisco IOS XR software, and Cisco Secure Email. The most serious vulnerability affects Nexus 9000 switches: when TCP ports 43210 or 43211 are accessible, an attacker can execute commands without a...

htb-labs-nexus

🏴‍☠️ HTB Labs - Nexus English 🇺🇸 | Español 🇪🇸 English | Español 📋 Overview Nexus is an Easy-difficulty Linux machine from Hack The Box that demonstrates a multi-stage attack chain involving virtual host enumeration, exposed credentials, vulnerable web application functionality, remote code...

VulnCheck KEV: CVE-2024-4956

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1...

CVE-2020-10199

CVE-2020-10199 Previously, during a penetration test, I encountered a target environment that had Nexus Repository Manager deployed. After stepping on some pitfalls, I finally managed to get a shell. I'll make a brief record here so it's easier to review later if needed. Target version: Sonatype...

CVE-2026-77125

A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization check. A user granted only the nexus:blobstores:create permission could invoke these endpoints to convert an existing...

CVE-2026-77124

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

CVE-2026-77123

Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabilities:read privilege can retrieve the plaintext shared secret configured on a webhook capability, which is intended to be masked from all API responses. Thi...

CVE-2026-77122

An authorization flaw in the REST API repository details endpoint GET /service/rest/v1/repositories/repositoryName in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group repository to retrieve metadata for member repositories on which it held no direct...

CVE-2026-20212

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

CVE-2026-77121

Sonatype Nexus Repository 3 is affected by a denial of service vulnerability caused by unbounded Maven POM metadata fields. A user with permission to deploy artifacts to a hosted Maven repository can upload a POM file containing an oversized metadata field , which causes future attempts to list o...