CVE-2022-1916: WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting
漏洞标题 CVE-2022-1916: WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting 漏洞描述 WordPress Active Products Tables for WooCommerce plugin prior to ...
CVE-2024-7120: Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 – Command Injection
漏洞标题 CVE-2024-7120: Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 - Command Injection 漏洞描述 A vulnerability, which was classified as critical, was found in Raisecom M...
CVE-2023-37988: Contact Form Generator <= 2.5.5 - Cross-Site Scripting
漏洞标题 CVE-2023-37988: Contact Form Generator <= 2.5.5 - Cross-Site Scripting 漏洞描述 The Contact Form Generator plugin for WordPress is vulnerable to Reflected Cross-Site Sc...
CVE-2021-34427: Eclipse BIRT Viewer – Remote Code Execution
漏洞标题 CVE-2021-34427: Eclipse BIRT Viewer - Remote Code Execution 漏洞描述 Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting re...
CVE-2024-39250: EfroTech Timetrax v8.3 – Sql Injection
漏洞标题 CVE-2024-39250: EfroTech Timetrax v8.3 - Sql Injection 漏洞描述 EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q p...
CVE-2021-41266: MinIO Operator Console Authentication Bypass
漏洞标题 CVE-2021-41266: MinIO Operator Console Authentication Bypass 漏洞描述 MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud...
CVE-2018-7662: Couchcms 2.0 Dictionary Disclosure
漏洞标题 CVE-2018-7662: Couchcms 2.0 Dictionary Disclosure 漏洞描述 Couchcms 2.0 Dictionary Disclosure fofa: app="Couchcms" shodan: http.html:"Couchcms" PoC代码
CVE-2025-5701: HyperComments <= 1.2.2 - Arbitrary Options Update
漏洞标题 CVE-2025-5701: HyperComments <= 1.2.2 - Arbitrary Options Update 漏洞描述 The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that...
CVE-2025-64525: Astro – Broken Access Control
漏洞标题 CVE-2025-64525: Astro - Broken Access Control 漏洞描述 Astro 2.16.0 to 5.15.5 contains a broken access control caused by insecure use of unsanitized x-forwarded-proto and ...
(CVE-2025-64764) Astro服务器岛功能反射型XSS漏洞
漏洞标题 (CVE-2025-64764) Astro服务器岛功能反射型XSS漏洞 漏洞描述 (CVE-2025-64764) Astro服务器岛功能反射型XSS漏洞 PoC代码 暂无
Astro Web Framework Cloudflare /_image 服务器端请求伪造漏洞（CVE-2025-58179）
漏洞标题 Astro Web Framework Cloudflare /_image 服务器端请求伪造漏洞（CVE-2025-58179） 漏洞描述 Astro 是一个用于内容驱动网站的网络框架。在11.0.3至12.6.5版本中，当使用Astro的Cloudfl...
CVE-2020-3580: Cisco ASA/FTD Software – Cross-Site Scripting
漏洞标题 CVE-2020-3580: Cisco ASA/FTD Software - Cross-Site Scripting 漏洞描述 Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software ar...
CVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal – Cross-Site Scripting
漏洞标题 CVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting 漏洞描述 FortiGate FortiOS through SSL VPN Web Portal contains a cross-site scripting vulnerabi...
CVE-2020-8615: WordPress Plugin Tutor LMS 1.5.3 – Cross-Site Request Forgery
漏洞标题 CVE-2020-8615: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery 漏洞描述 A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in...
CVE-2023-37599: Issabel PBX 4.0.0-6 – Directory Listing
漏洞标题 CVE-2023-37599: Issabel PBX 4.0.0-6 - Directory Listing 漏洞描述 An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules...
CVE-2025-34026: Versa Concerto Actuator Endpoint – Authentication Bypass
漏洞标题 CVE-2025-34026: Versa Concerto Actuator Endpoint - Authentication Bypass 漏洞描述 An authentication bypass vulnerability affected the Spring Boot Actuator endpoints in Ver...
