Sploitus

Exploit for CVE-2019-7238

kitploit · 2026-08-25

Exploit Code

MARKDOWN23 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MPGN-CVE-2019-7238
# CVE-2019-7238

Nexus Repository Manager 3 تنفيذ كود عن بُعد بدون مصادقة < 3.15.0 اكتشفه Rico Tencent Security Yunding Lab و @voidfyoo

![image](https://assets.kitploit.com/production/public/readmes/29526/4bc6eca372cf301e51686886fb66b47375e3915c25d8c9365dbfc843f4486ffb.png)

**تحليل مفصّل (بالإنجليزية):**

  * https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/



**تحليل مفصّل (بغير الإنجليزية):**

  * https://xz.aliyun.com/t/4136
  * https://www.lucifaer.com/2019/02/19/Nexus%20Repository%20Manager%203%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90%EF%BC%88CVE-2019-7238%EF%BC%89/



**نشرة أمنية:**

  * https://support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019