漏洞标题 CVE-2025-4302: Stop User Enumeration WordPress plugin - Authentication Bypass 漏洞描述 Stop User Enumeration WordPress plugin < 1.7.3 contains an authentication bypass ...

漏洞标题 CVE-2021-24214: WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting 漏洞描述 WordPress OpenID Connect Generic Client plugin 3.8.0 and 3.8.1 contains...

这群该死的黑客，竟然这么快就找到了我的flag,这次我把它们放在了那个地方，哼哼！ 遇到sql注入的题目，首先先试试' ' ') ') ') ') 这几种组合，总有一个可以成功，实在没思路就放sqlmap吧 万能...

漏洞标题 CVE-2022-1933: WordPress CDI <5.1.9 - Cross Site Scripting 漏洞描述 WordPress CDI plugin prior to 5.1.9 contains a cross-site scripting vulnerability. The plugin does n...

今天我们来聊一聊如今与我们日常生活联系非常密切的一样东西——我们出行，就餐，购物，几乎是每天都可能会用到。没错，就是二维码。 曾几何时，谁能料到，一个小小的黑白码竟有如此广泛的用途...

漏洞标题 CVE-2024-43917: WordPress TI WooCommerce Wishlist Plugin <= 2.8.2 - SQL Injection 漏洞描述 In the latest version (2.8.2 as of writing the article) and below, the plugin...

漏洞标题 CVE-2018-7490: uWSGI PHP Plugin Directory Traversal 漏洞描述 uWSGI PHP Plugin Directory Traversal fofa: app="uWSGI" shodan: http.html:"uWSGI" PoC代码

漏洞标题 CVE-2020-35234: SMTP WP Plugin Directory Listing 漏洞描述 The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access. Po...

漏洞标题 CVE-2018-20526: Roxy Fileman 1.4.5 - Unrestricted File Upload 漏洞描述 Roxy Fileman 1.4.5 is susceptible to unrestricted file upload via upload.php. An attacker can execut...

1、以下面网站为例，密码为：qazwsx123，首先抓包，发现加密后的密码为：/BB3blYPP6yJ8QPgX1gkQA==，对应字段loginPwd 2、密码无法进行常规解码方式解开时，但是我们想对此处进行相关测试，比如...

漏洞标题 CVE-2017-3133: Fortinet FortiOS < 5.6.0 - Cross-Site Scripting 漏洞描述 A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attac...

漏洞标题 CVE-2021-25298: Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection 漏洞描述 Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command inject...

漏洞标题 CVE-2018-19127: PHPCMS 2008 - Remote Code Execution via Template Injection 漏洞描述 PHPCMS 2008 suffers from an unauthenticated RCE via template injection in type.php, whe...

漏洞标题 CVE-2021-25065: Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting 漏洞描述 The plugin was affected by a reflected XSS in custom-face...

漏洞标题 CVE-2019-19824: TOTOLINK Realtek SD Routers - Remote Command Injection 漏洞描述 TOTOLINK Realtek SDK based routers may allow an authenticated attacker to execute arbitrary...

漏洞标题 (CVE-2021-20090) Buffalo WSR-2533DHPL2/WSR-2533DHP3 Web界面 路径遍历漏洞 漏洞描述 (CVE-2021-20090) Buffalo WSR-2533DHPL2/WSR-2533DHP3 Web界面 路径遍历漏洞 PoC代码 暂无