漏洞标题 Adobe Commerce CVE-2024-34102 XML外部实体注入漏洞 漏洞描述 Adobe Commerce 存在XML外部实体注入漏洞，此漏洞是由于程序未充分验证用户输入estimate-shipping-methods的数据所导致...

漏洞标题 CVE-2017-1000353: Jenkins CLI - Java Deserialization 漏洞描述 Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remo...

漏洞标题 CVE-2024-5827: Vanna - SQL injection 漏洞描述 Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject mal...

漏洞标题 CVE-2023-0297: PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE) 漏洞描述 Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. PoC代码

漏洞标题 Apache Druid存在服务器请求伪造漏洞(CVE-2025-27888) 漏洞描述 Apache Druid存在服务器请求伪造漏洞，攻击者可以直接访问的内部系统。 PoC代码 暂无

这篇文章主要介绍了linux下安装ffmpeg的详细教程,本文给大家介绍的非常详细，对大家的学习或工作具有一定的参考借鉴价值，需要的朋友可以参考下 一、centos linux下安装ffmpeg 1、下载解压 wget...

漏洞标题 CVE-2024-10443: Synology BeeStation BST150-4T - Unauthenticated Command Injection 漏洞描述 Improper neutralization of special elements used in a command ('Command Inj...

收藏url编码后的xss入门语句再编辑一下即可 别说你不会 文字来源于- 火线 Zone-云安全社区，安全小天地只做文章分享，如有侵权，请联系站长删除

漏洞标题 CVE-2023-44352: Adobe Coldfusion - Cross-Site Scripting 漏洞描述 Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross...

漏洞标题 CVE-2020-19625: Gridx 1.3 - Remote Code Execution 漏洞描述 Gridx 1.3 is susceptible to remote code execution via tests/support/stores/test_grid_filter.php, which allows re...

漏洞标题 CVE-2018-16979: Monstra CMS 3.0.4 - HTTP Header Injection 漏洞描述 Monstra CMS 3.0.4 is susceptible to HTTP header injection in the plugins/captcha/crypt/cryptographp.php ...

漏洞标题 CVE-2022-44877: Centos Web Panel 7 Unauthenticated Remote Code 漏洞描述 Shodan: http.title:"Login | Control WebPanel" fofa: app="CWP-虚拟主机控制面板" ...

这篇文章主要介绍了Nginx + consul + upsync 完成动态负载均衡,需要的朋友可以参考下 目录前置知识DNS域名解析过程 外网映射 nginx 核心知识什么是nginx应用场景名词解释Nginx + cons...

漏洞标题 CVE-2020-26413: Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure 漏洞描述 GitLab CE and EE 13.4 through 13.6.2 is susceptible to Information disclosure via GraphQL. Use...

漏洞标题 CVE-2021-20086: Odoo Apps - Cross-Site Scripting via Prototype Pollution 漏洞描述 jquery-bbq 1.2.1 contains a prototype pollution caused by improperly controlled modificat...

漏洞标题 CVE-2024-38472: Apache HTTPd Windows UNC - Server-Side Request Forgery 漏洞描述 SSRF in Apache HTTP Server on Windows allows to potentially leak NTML hashes to a malicious...