CVE-2025-2610: MagnusBilling Alarm Module – Cross-Site Scripting
漏洞标题 CVE-2025-2610: MagnusBilling Alarm Module - Cross-Site Scripting 漏洞描述 Improper neutralization of input during web page generation vulnerability in MagnusSolution Magnu...
CVE-2023-23491: Quick Event Manager < 9.7.5 - Cross-Site Scripting
漏洞标题 CVE-2023-23491: Quick Event Manager < 9.7.5 - Cross-Site Scripting 漏洞描述 The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cro...
CVE-2022-22963: Spring Cloud Function SPEL 远程命令执行漏洞
漏洞标题 CVE-2022-22963: Spring Cloud Function SPEL 远程命令执行漏洞 漏洞描述 Spring Cloud Function 是基于Spring Boot 的函数计算框架，它抽象出所有传输细节和基础架构，允许开发人员保...
CVE-2018-2894: Oracle WebLogic Server – Remote Code Execution
漏洞标题 CVE-2018-2894: Oracle WebLogic Server - Remote Code Execution 漏洞描述 The Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services) ...
CVE-2022-45917: ILIAS eLearning <7.16 - Open Redirect
漏洞标题 CVE-2022-45917: ILIAS eLearning <7.16 - Open Redirect 漏洞描述 ILIAS eLearning before 7.16 contains an open redirect vulnerability. An attacker can redirect a user to a...
CVE-2022-44957: WebTareas 2.4p5 – Cross-Site Scripting
漏洞标题 CVE-2022-44957: WebTareas 2.4p5 - Cross-Site Scripting 漏洞描述 webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /clie...
CVE-2024-6235: NetScaler Console – Sensitive Information Disclosure
漏洞标题 CVE-2024-6235: NetScaler Console - Sensitive Information Disclosure 漏洞描述 Sensitive information disclosure in NetScaler Console PoC代码
CVE-2020-11455: LimeSurvey 4.1.11 – Local File Inclusion
漏洞标题 CVE-2020-11455: LimeSurvey 4.1.11 - Local File Inclusion 漏洞描述 LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversa...
CVE-2014-4536: Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting
漏洞标题 CVE-2014-4536: Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting 漏洞描述 Multiple cross-site scripting vulnerabilities in tests/notAuto_test_ContactServ...
Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞（CVE-2023-49070）
漏洞标题 Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞（CVE-2023-49070） 漏洞描述 Apache OFBiz是一个开源的企业资源规划（ERP）系统，提供了多种商业功能和模块。Apache OFBiz 在...
CVE-2021-33564: Ruby Dragonfly <1.4.0 - Remote Code Execution
漏洞标题 CVE-2021-33564: Ruby Dragonfly <1.4.0 - Remote Code Execution 漏洞描述 Ruby Dragonfly before 1.4.0 contains an argument injection vulnerability that allows remote attac...
CVE-2021-31324: CentOS Web Panel – OS Command Injection
漏洞标题 CVE-2021-31324: CentOS Web Panel - OS Command Injection 漏洞描述 The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability lea...
CVE-2022-1392: WordPress Videos sync PDF <=1.7.4 - Local File Inclusion
漏洞标题 CVE-2022-1392: WordPress Videos sync PDF <=1.7.4 - Local File Inclusion 漏洞描述 WordPress Videos sync PDF 1.7.4 and prior does not validate the p parameter before usin...
CVE-2023-22463: KubePi JwtSigKey – Admin Authentication Bypass
漏洞标题 CVE-2023-22463: KubePi JwtSigKey - Admin Authentication Bypass 漏洞描述 KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-co...
CVE-2024-25669: CaseAware a360inc – Cross-Site Scripting
漏洞标题 CVE-2024-25669: CaseAware a360inc - Cross-Site Scripting 漏洞描述 a360inc CaseAware contains a reflected cross-site scripting vulnerability via the user parameter transmit...
Apache Solr CVE-2019-0193 DataImportHandler 代码执行漏洞
漏洞标题 Apache Solr CVE-2019-0193 DataImportHandler 代码执行漏洞 漏洞描述 Apache Solr 中存在代码执行漏洞。该漏洞是由于DataImportHandler模块对用户输入的数据验证不足导致的。 PoC代码...
