漏洞标题 CVE-2019-10232: Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection 漏洞描述 Teclib GLPI <= 9.3.3 exposes a script (/scripts/unlock_tasks.php) that incorrectly sani...

漏洞标题 CVE-2022-44356: WAVLINK Quantum D4G (WL-WN531G3) - Information Disclosure 漏洞描述 WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3....

漏洞标题 CVE-2024-9061: WP Popup Builder Popup Forms and Marketing Lead Generation <= 1.3.5 - Arbitrary Shortcode Execution 漏洞描述 The The WP Popup Builder Popup Forms and Mar...

上一篇介绍了一下docke dockerfile文件编写，方便构造镜像，这一篇我们来介绍一下docker仓库搭建。 Harbor介绍 就像我们有了本地git代码工具还需要代码托管平台gerrit，gitlab一样，Harbor是由V...

漏洞标题 CVE-2018-17153: Western Digital MyCloud NAS - Authentication Bypass 漏洞描述 It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an a...

漏洞标题 CVE-2019-12990: Citrix SD-WAN Center - Local File Inclusion 漏洞描述 Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer func...

漏洞标题 CVE-2018-12613: PhpMyAdmin 4.8.1 Remote File Inclusion 漏洞描述 An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potent...

漏洞标题 CVE-2022-2487: Wavlink WN535K2/WN535K3 - OS Command Injection 漏洞描述 Wavlink WN535K2 and WN535K3 routers are susceptible to OS command injection which affects unknown co...

漏洞标题 CVE-2020-11853: Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution 漏洞描述 Micro Focus Operations Bridge Manager in versions 2020.05 and below is ...

本文转载于公众号：融云攻防实验室，原文地址： 漏洞复现-Struts2-013 远程命令执行漏洞  Struts是Apache软件基金会（ASF）赞助的一个开源项目。它最初是Jakarta项目中的一个子项目，并在2004...

漏洞标题 CVE-2023-6909: Mlflow <2.9.2 - Path Traversal 漏洞描述 Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. PoC代码

漏洞标题 CVE-2020-2096: Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting 漏洞描述 Jenkins Gitlab Hook 1.4.2 and earlier does not escape project names in the build_now endpoint...

漏洞标题 CVE-2023-40752: PHPJabbers Make an Offer Widget v1.0 - Cross-Site Scripting 漏洞描述 There is a Cross Site Scripting (XSS) vulnerability in the "action" paramete...

漏洞标题 CVE-2024-39646: WordPress Custom 404 Pro <= 3.11.1 - Reflected XSS 漏洞描述 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripti...

漏洞标题 CVE-2022-0968: Microweber <1.2.12 - Integer Overflow 漏洞描述 Microweber before 1.2.12 is susceptible to integer overflow. The application allows large characters to in...

前言 现在java站越来越多啦，面试也基本上全部问的都是java呀，加油呀 什么是json？ 借用人家的表达：“.json是用来存储简单的数据结构和对象的文件。json是一种轻量级的数据交换格式，基于ECMA...