CVE-2025-9868

Server-Side Request Forgery SSRF in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests...

CVE-2025-9868 Nexus Repository 2 - SSRF Vulnerability in Remote Browser Plugin

Server-Side Request Forgery SSRF in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests...

CVE-2025-9868 Nexus Repository 2 - SSRF Vulnerability in Remote Browser Plugin

Server-Side Request Forgery SSRF in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests...

CVE-2025-9868

The vulnerability is a Server-Side Request Forgery (SSRF) in the Remote Browser Plugin of Sonatype Nexus Repository 2.x, up to and including 2.15.2. The issue allows unauthenticated remote attackers to exfiltrate proxy repository credentials by crafting HTTP requests. The root cause is SSRF in th...

EUVD-2025-33291

Server-Side Request Forgery SSRF in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests...

Sonatype Nexus Repository 安全漏洞

Sonatype Nexus Repository is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype Nexus Repository version 2.15.2 and earlier, which stems from a server-side request forgery in the Remote...

PT-2025-41292

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository versions 2.0 through 2.15.2 Description A Server-Side Request Forgery SSRF exists in the Remote Browser Plugin. This allows unauthenticated remote attackers to extract proxy repository credentials via crafted HTTP...

EUVD-2003-1595

Malware in sbrugna...

EUVD-2019-15725

Malware in sbrugna...

EUVD-2020-29098

Malware in sbrugna...

EUVD-2020-7685

Malware in sbrugna...

EUVD-2017-18207

Malware in sbrugna...

EUVD-2004-2431

Malware in sbrugna...

EUVD-2022-2289

Malicious code in bioql PyPI...

EUVD-2023-31811

Malicious code in bioql PyPI...

EUVD-2023-0977

Malicious code in bioql PyPI...

EUVD-2024-18205

Malicious code in bioql PyPI...

EUVD-2025-23274

Malicious code in bioql PyPI...

EUVD-2025-22510

Malicious code in bioql PyPI...

EUVD-2022-41713

Malicious code in bioql PyPI...