CVE-2026-77124 Nexus Repository 3 - Script Execution Disable Setting Not Enforced

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

CVE-2026-77124

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

CVE-2026-77124: Incomplete List of Disallowed Inputs

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

CVE-2019-25024

OpenRepeater ORP before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajaxsystem.php postservice parameter...

PT-2021-9092

Name of the Vulnerable Software and Affected Versions OpenRepeater versions prior to 2.2 Description The issue allows unauthenticated command injection via shell metacharacters in the post service parameter of the "functions/ajax system.php" API endpoint. Recommendations For versions prior to 2.2...

Aaron Crawford OpenRepeater Operating System Command Injection Vulnerability

Aaron Crawford OpenRepeater is an application by Aaron Crawford, an individual developer in the United States. It provides a home for updating and sharing code. An operating system command injection vulnerability exists in OpenRepeater. The vulnerability stems from allowing shell meta-commands to...