Vendor
Sonatype Nexus Repository 3 Pro: Authentication bypass (CVE-2026-113373)
1 TTP 1 CVESonatype Nexus Repository 3 Pro is vulnerable to an authentication bypass (CVE-2026-113373) that allows locked or disabled users to successfully authenticate via SAML or OAuth2/OpenID Connect and gain an active session.
Sonatype Nexus Repository Manager Remote Code Execution (CVE-2024-5082)
1 rule 1 TTP 1 CVEAn authenticated remote code execution vulnerability in Sonatype Nexus Repository Manager 2 (up to 2.15.1) allows attackers to execute arbitrary code by uploading a malicious Maven artifact containing an evaluated Velocity template.
Static Encryption Key Vulnerability in Sonatype Nexus Repository Manager
1 TTP 1 CVECVE-2024-5764 is a vulnerability in Sonatype Nexus Repository Manager where a static encryption key in the Java PasswordCipher class permits the decryption of sensitive data, now supported by a public exploit script.
Hijacked npm Package Attempts to Deliver PolinRider-Linked RAT
2 rules 1 TTPAttackers are compromising npm packages to distribute a RAT linked to PolinRider, directly injecting malicious code into the software supply chain.
Shai-Hulud Campaign Returns Targeting npm Maintainer Accounts
1 rule 2 TTPsThe Shai-Hulud campaign is back and targets maintainer accounts to publish malicious code directly into the software supply chain via npm, recently hitting the Ant Design (AntV) ecosystem and potentially exposing downstream developers to credential theft and remote code execution.
Sonatype Nexus Repository Manager Security Bypass Vulnerability
2 rules 1 TTPAn authenticated remote attacker can exploit a vulnerability in Sonatype Nexus Repository Manager to bypass security precautions.