漏洞标题 (CVE-2025-27817) Apache Kafka Client任意文件读取和SSRF漏洞 漏洞描述 (CVE-2025-27817) Apache Kafka Client任意文件读取和SSRF漏洞 PoC代码 暂无

漏洞标题 CVE-2018-17207: WordPress Duplicator Plugin < 1.2.42 - Arbitrary Code Execution 漏洞描述 An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing le...

漏洞标题 CVE-2023-22463: KubePi JwtSigKey 登陆绕过漏洞 漏洞描述 KubePi 中存在 JWT硬编码，攻击者通过硬编码可以获取服务器后台管理权限，添加任意用户 fofa: "kubepi" PoC代码

漏洞标题 CVE-2022-44947: Rukovoditel <= 3.2.1 - Cross Site Scripting 漏洞描述 Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in t...

漏洞标题 CVE-2025-53558: ZTE ZXHN-F660T/F660A - Default Credentials 漏洞描述 ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. Wit...

漏洞标题 CVE-2016-1000135: WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting 漏洞描述 WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerabi...

漏洞标题 CVE-2024-0593: WordPress Simple Job Board - Unauthorized Data Access 漏洞描述 The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to in...

漏洞标题 CVE-2023-3578: DedeCMS 5.7.109 - Server-Side Request Forgery 漏洞描述 Manipulation of the rssurl parameter in co_do.php leads to server-side request forgery in DedeCMS ver...

漏洞标题 CVE-2020-6287: SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition 漏洞描述 SAP NetWeaver AS JAVA (LM Configuration Wizard), versions 7.30, 7.31, 7.40, 7.50, does not ...

漏洞标题 CVE-2021-32618: Python Flask-Security - Open Redirect 漏洞描述 Python Flask-Security contains an open redirect vulnerability. Existing code validates that the URL specifie...

漏洞标题 CVE-2023-30192: PrestaShop 'possearchproducts' <= 1.7 - SQL Injection 漏洞描述 In the module “Search Products” (possearchproducts) from PosThemes for Presta...

漏洞标题 CVE-2025-2610: MagnusBilling Alarm Module - Cross-Site Scripting 漏洞描述 Improper neutralization of input during web page generation vulnerability in MagnusSolution Magnu...

漏洞标题 CVE-2022-46020: WBCE CMS v1.5.4 - Remote Code Execution 漏洞描述 WBCE CMS v1.5.4 can implement getshell by modifying the upload file type. PoC代码

漏洞标题 Atlassian Jira 模板注入漏洞（CVE-2019-11581） 漏洞描述 Atlassian JIRA Server和JIRA Data Center中存在安全漏洞。多个版本受到影响。 PoC代码 暂无

漏洞标题 CVE-2021-38704: ClinicCases 7.3.3 Cross-Site Scripting 漏洞描述 ClinicCases 7.3.3 is susceptible to multiple reflected cross-site scripting vulnerabilities that could allo...

漏洞标题 CVE-2007-4556: OpenSymphony XWork/Apache Struts2 - Remote Code Execution S2-001 漏洞描述 Apache Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as...