CVE-2024-24565: CrateDB数据库任意文件读取漏洞
漏洞标题 CVE-2024-24565: CrateDB数据库任意文件读取漏洞 漏洞描述 CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time...
CVE-2024-53900: Mongoose < 8.8.3 - Remote Code Execution
漏洞标题 CVE-2024-53900: Mongoose < 8.8.3 - Remote Code Execution 漏洞描述 Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. PoC代码
CVE-2025-23061: Mongoose – NoSQL Injection
漏洞标题 CVE-2025-23061: Mongoose - NoSQL Injection 漏洞描述 NoSQL injection vulnerability in Mongoose < 8.9.5 affecting the populate() function's match option. This vulner...
CVE-2019-8390: qdPM 9.1 – Cross-site Scripting
漏洞标题 CVE-2019-8390: qdPM 9.1 - Cross-site Scripting 漏洞描述 qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter. PoC代码
CVE-2021-43496: Clustering Local File Inclusion
漏洞标题 CVE-2021-43496: Clustering Local File Inclusion 漏洞描述 Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversa...
CVE-2022-3477: WordPress tagDiv Composer < 3.5 - Authentication Bypass
漏洞标题 CVE-2022-3477: WordPress tagDiv Composer < 3.5 - Authentication Bypass 漏洞描述 The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress the...
CVE-2023-3169: tagDiv Composer < 4.2 - Stored Cross-Site Scripting
漏洞标题 CVE-2023-3169: tagDiv Composer < 4.2 - Stored Cross-Site Scripting 漏洞描述 tagDiv Composer plugin versions before 4.2 for WordPress are vulnerable to unauthenticated s...
CVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal – Cross-Site Scripting
漏洞标题 CVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting 漏洞描述 FortiGate FortiOS through SSL VPN Web Portal contains a cross-site scripting vulnerabi...
CVE-2022-1574: WordPress HTML2WP <=1.0.0 - Arbitrary File Upload
漏洞标题 CVE-2022-1574: WordPress HTML2WP <=1.0.0 - Arbitrary File Upload 漏洞描述 WordPress HTML2WP plugin through 1.0.0 contains an arbitrary file upload vulnerability. The pl...
CVE-2018-0127: Cisco RV132W/RV134W Router – Information Disclosure
漏洞标题 CVE-2018-0127: Cisco RV132W/RV134W Router - Information Disclosure 漏洞描述 Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could...
CVE-2022-23397: Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting
漏洞标题 CVE-2022-23397: Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting 漏洞描述 The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to us...
CVE-2022-4321: PDF Generator for WordPress < 1.1.2 - Cross Site Scripting
漏洞标题 CVE-2022-4321: PDF Generator for WordPress < 1.1.2 - Cross Site Scripting 漏洞描述 The plugin includes a vendored dompdf example file which is susceptible to Reflected ...
CVE-2022-3980: Sophos Mobile managed on-premises – XML External Entity Injection
漏洞标题 CVE-2022-3980: Sophos Mobile managed on-premises - XML External Entity Injection 漏洞描述 An XML External Entity (XXE) vulnerability allows server-side request forgery (SS...
CVE-2022-24384: SmarterTools SmarterTrack – Cross-Site Scripting
漏洞标题 CVE-2022-24384: SmarterTools SmarterTrack - Cross-Site Scripting 漏洞描述 Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: Smarter...
CVE-2019-17444: Jfrog Artifactory <6.17.0 - Default Admin Password
漏洞标题 CVE-2019-17444: Jfrog Artifactory <6.17.0 - Default Admin Password 漏洞描述 Jfrog Artifactory prior to 6.17.0 uses default passwords (such as "password") for ...
CVE-2019-9733: JFrog Artifactory 6.7.3 – Admin Login Bypass
漏洞标题 CVE-2019-9733: JFrog Artifactory 6.7.3 - Admin Login Bypass 漏洞描述 JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-adm...
