Browse / Central Security Project

Central Security Project

See its reports on the map

Attack surface: 36 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Central Security Project

• Code Execution4
• Denial of Service2
• Business Logic1
• Cryptography1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. OS Command Injection in Nexus Repository Manager 2.x(bypass CVE-2019-5475)Command Injection - Generic · critical
   34 votes
2. OS Command Injection in Nexus Repository Manager 2.xOS Command Injection · critical
   28 votes
3. Unrestricted File Upload Leading to Remote Code ExecutionBusiness Logic Errors · critical
   12 votes
4. OS Command Injection in Nexus Repository Manager 2.x -- Bypass for Nexus Repository Manage 2.14.15-01 Command Injection fixCommand Injection - Generic · critical
   7 votes
5. Unsafe deserialization in Nexus Repository helm pluginDeserialization of Untrusted Data · critical
   5 votes
6. c3p0 may be exploited by a Billion Laughs Attack when loading XML configurationXML Entity Expansion · medium
   5 votes
7. Repositories of datanucleus are fetched over insecure protocol (http insted of https)Man-in-the-Middle · high
   1 votes
8. Pippo XML Entity Expansion (Billion Laughs Attack)InformativeXML Entity Expansion · high
   1 votes