云记-渗透云记 - 专注于网络安全与技术分享-第940页
云记的头像-渗透云记 - 专注于网络安全与技术分享
UID:2 已加入渗透云记249天 徽章-初出茅庐-渗透云记 - 专注于网络安全与技术分享徽章-人气大使-渗透云记 - 专注于网络安全与技术分享徽章-人气佳作-渗透云记 - 专注于网络安全与技术分享6枚徽章知识分享官
CVE-2023-2745: WordPress Core <=6.2 - Directory Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2023-2745: WordPress Core <=6.2 - Directory Traversal

漏洞标题 CVE-2023-2745: WordPress Core <=6.2 - Directory Traversal 漏洞描述 WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘...
CVE-2025-24354: Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)-渗透云记 - 专注于网络安全与技术分享

CVE-2025-24354: Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)

漏洞标题 CVE-2025-24354: Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF) 漏洞描述 imgproxy contains an issue caused by not blocking the 0.0.0.0 address even when IMGPROXY...
CVE-2019-16996: Metinfo 7.0.0 beta - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2019-16996: Metinfo 7.0.0 beta – SQL Injection

漏洞标题 CVE-2019-16996: Metinfo 7.0.0 beta - SQL Injection 漏洞描述 Metinfo 7.0.0 beta is susceptible to SQL Injection in app/system/product/admin/product_admin.class.php via the ...
CVE-2025-61882: Oracle E-Business Suite 12.2.3–12.2.14 – Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2025-61882: Oracle E-Business Suite 12.2.3–12.2.14 – Remote Code Execution

漏洞标题 CVE-2025-61882: Oracle E-Business Suite 12.2.3–12.2.14 – Remote Code Execution 漏洞描述 Oracle Concurrent Processing 12.2.3-12.2.14 contains a remote code execution caus...
CVE-2010-1478: Joomla! Component Jfeedback 1.2 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2010-1478: Joomla! Component Jfeedback 1.2 – Local File Inclusion

漏洞标题 CVE-2010-1478: Joomla! Component Jfeedback 1.2 - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) c...
CVE-2010-1478: Joomla! Component Jfeedback 1.2 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2010-1478: Joomla! Component Jfeedback 1.2 – Local File Inclusion

漏洞标题 CVE-2010-1478: Joomla! Component Jfeedback 1.2 - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) c...
CVE-2010-1478: Joomla! Component Jfeedback 1.2 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2010-1478: Joomla! Component Jfeedback 1.2 – Local File Inclusion

漏洞标题 CVE-2010-1478: Joomla! Component Jfeedback 1.2 - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) c...
CVE-2020-26836: SAP Solution Manager - Open Redirect-渗透云记 - 专注于网络安全与技术分享

CVE-2020-26836: SAP Solution Manager – Open Redirect

漏洞标题 CVE-2020-26836: SAP Solution Manager - Open Redirect 漏洞描述 SAP Solution Manager contains an open redirect vulnerability via the logoff endpoint. An attacker can redirec...
CVE-2010-1602: Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2010-1602: Joomla! Component ZiMB Comment 0.8.1 – Local File Inclusion

漏洞标题 CVE-2010-1602: Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8...
CVE-2010-2036: Joomla! Component Percha Fields Attach 1.0 - Directory Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2010-2036: Joomla! Component Percha Fields Attach 1.0 – Directory Traversal

漏洞标题 CVE-2010-2036: Joomla! Component Percha Fields Attach 1.0 - Directory Traversal 漏洞描述 A directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsa...
bugbounty技巧聚合20220207-渗透云记 - 专注于网络安全与技术分享

bugbounty技巧聚合20220207

漏洞报告 价值1.75万美刀的全回显SSRF http://hackerone.com/reports/1406938 TikTok SMB子账号接管 http://hackerone.com/reports/1404612 基于X-Forwarded-Host的XSS http://hackerone.com/re...
2022年3月10日 23:34
010
CVE-2021-21816: D-Link DIR-3040 1.13B03 - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2021-21816: D-Link DIR-3040 1.13B03 – Information Disclosure

漏洞标题 CVE-2021-21816: D-Link DIR-3040 1.13B03 - Information Disclosure 漏洞描述 D-Link DIR-3040 1.13B03 is susceptible to information disclosure in the Syslog functionality. A s...
CVE-2020-9043: WordPress wpCentral <1.5.1 - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2020-9043: WordPress wpCentral <1.5.1 - Information Disclosure

漏洞标题 CVE-2020-9043: WordPress wpCentral <1.5.1 - Information Disclosure 漏洞描述 WordPress wpCentral plugin before 1.5.1 is susceptible to information disclosure. An attacke...
CVE-2016-1000130: WordPress e-search <=1.0 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2016-1000130: WordPress e-search <=1.0 - Cross-Site Scripting

漏洞标题 CVE-2016-1000130: WordPress e-search <=1.0 - Cross-Site Scripting 漏洞描述 Wordpress plugin e-search 1.0 and before contains a cross-site scripting vulnerability via da...
CVE-2020-28976: WordPress Canto 1.3.0 - Blind Server-Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2020-28976: WordPress Canto 1.3.0 – Blind Server-Side Request Forgery

漏洞标题 CVE-2020-28976: WordPress Canto 1.3.0 - Blind Server-Side Request Forgery 漏洞描述 WordPress Canto plugin 1.3.0 is susceptible to blind server-side request forgery. An att...
CVE-2024-4399: WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2024-4399: WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery

漏洞标题 CVE-2024-4399: WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery 漏洞描述 The CAS WordPress theme through version 1.0.0 is vulnerable to Server-Side Request Fo...