CVE-2022-0212: WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting
漏洞标题 CVE-2022-0212: WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting 漏洞描述 WorsPress Spider Calendar plugin through 1.5.65 is susceptible to cross-site scripting...
CVE-2022-29014: Razer Sila Gaming Router 2.0.441_api-2.0.418 – Local File Inclusion
漏洞标题 CVE-2022-29014: Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion 漏洞描述 Razer Sila Gaming Router 2.0.441_api-2.0.418 is vulnerable to local file inclu...
CVE-2022-4447: WordPress Fontsy <=1.8.6 - SQL Injection
漏洞标题 CVE-2022-4447: WordPress Fontsy <=1.8.6 - SQL Injection 漏洞描述 WordPress Fontsy plugin through 1.8.6 is susceptible to SQL injection. The plugin does not properly san...
blockwishlist SQL注入漏洞(CVE-2022-31101)
漏洞标题 blockwishlist SQL注入漏洞(CVE-2022-31101) 漏洞描述 blockwishlist SQL注入漏洞(CVE-2022-31101) PoC代码 暂无
CVE-2025-6970: WordPress Events Manager <= 7.0.3 - SQL Injection
漏洞标题 CVE-2025-6970: WordPress Events Manager <= 7.0.3 - SQL Injection 漏洞描述 The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable...
Acmailer 邮件系统 init_ctl.cgi 文件 sendmail_path 参数远程命令执行漏洞（CVE-2021-20617）
漏洞标题 Acmailer 邮件系统 init_ctl.cgi 文件 sendmail_path 参数远程命令执行漏洞（CVE-2021-20617） 漏洞描述 Acmailer 是一款用于支持邮件服务的CGI软件。Acmailer 4.0.2版本及之前版本存...
CVE-2022-0424: Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure
漏洞标题 CVE-2022-0424: Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure 漏洞描述 The Popup by Supsystic WordPress plugin before 1.10.9 does not have any auth...
CVE-2010-1722: Joomla! Component Online Market 2.x – Local File Inclusion
漏洞标题 CVE-2010-1722: Joomla! Component Online Market 2.x - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the Online Market (com_market) component 2.x for ...
CVE-2022-2462: WordPress Transposh <=1.0.8.1 - Information Disclosure
漏洞标题 CVE-2022-2462: WordPress Transposh <=1.0.8.1 - Information Disclosure 漏洞描述 WordPress Transposh plugin through is susceptible to information disclosure via the AJAX ...
CVE-2023-38950: ZKTeco BioTime v8.5.5 – Path Traversal
漏洞标题 CVE-2023-38950: ZKTeco BioTime v8.5.5 - Path Traversal 漏洞描述 A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers ...
CVE-2023-42442: JumpServer > 3.6.4 – Information Disclosure
漏洞标题 CVE-2023-42442: JumpServer > 3.6.4 - Information Disclosure 漏洞描述 JumpServer is an open source bastion host and a professional operation and maintenance security aud...
CVE-2022-43165: Rukovoditel <= 3.2.1 - Cross Site Scripting
漏洞标题 CVE-2022-43165: Rukovoditel <= 3.2.1 - Cross Site Scripting 漏洞描述 A stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php?modul...
CVE-2023-25157: GeoServer OGC Filter – SQL Injection
漏洞标题 CVE-2023-25157: GeoServer OGC Filter - SQL Injection 漏洞描述 GeoServer is an open source software server written in Java that allows users to share and edit geospatial da...
CVE-2023-30258: MagnusBilling – Unauthenticated Remote Code Execution
漏洞标题 CVE-2023-30258: MagnusBilling - Unauthenticated Remote Code Execution 漏洞描述 Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote at...
CVE-2023-3847: MooDating 1.2 – Cross-Site scripting
漏洞标题 CVE-2023-3847: MooDating 1.2 - Cross-Site scripting 漏洞描述 A vulnerability classified as problematic was found in mooSocial mooDating 1.2. This vulnerability affects unk...
CasaOS < 0.4.4 信息泄露(CVE-2023-37265)
漏洞标题 CasaOS < 0.4.4 信息泄露(CVE-2023-37265) 漏洞描述 CasaOS是一个基于 Golang 的简单、易用、优雅的开源家庭云系统。攻击者通过构造特殊的请求包获取主机敏感信息。 PoC代码 暂无
