漏洞标题 CVE-2025-11749: WordPress AI Engine Plugin - Token Exposure 漏洞描述 Unauthenticated sensitive information exposure in AI Engine WordPress plugin <= 3.1.3 exposes beare...

漏洞标题 CVE-2023-27637: PrestaShop `tshirtecommerce` Module - SQL Injection 漏洞描述 The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via t...

漏洞标题 CVE-2024-21645: pyload - Log Injection 漏洞描述 A log injection vulnerability was identified in pyload. This vulnerability allows any unauthenticated actor to inject arbit...

漏洞标题 CVE-2021-3007: Laminas Project laminas-http - Remote Code Execution 漏洞描述 Laminas Project laminas-http < 2.14.2 and Zend Framework 3.0.0 contain a deserialization vu...

1. 为什么要全局代理 在渗透的时候要保护好自己啊，不要被溯源到。 在买的一些VPS上做扫描的时候，有可能会触发到VPS厂商(搬瓦工、Vultr的都有遇到过)的安全机制(如DDoS)，将我们的VPS停机。做...

这篇文章主要介绍了Docker容器时区调整操作，具有很好的参考价值，希望对大家有所帮助。一起跟随小编过来看看吧 如何检查Docker容器时区是否与宿主机一致？ 1、进入宿主机, 执行以下命令： # 查...

漏洞标题 CVE-2023-38964: Academy LMS 6.0 - Cross-Site Scripting 漏洞描述 Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability through ...

本文转载于公众号：融云攻防实验室，原文地址： 漏洞复现 ShowDoc PageController.class.php任意文件上传漏洞 ShowDoc是一个非常适合IT团队的在线文档分享工具，它可以加快团队之间沟通的效率。...

漏洞标题 CVE-2022-22965: Spring - Remote Code Execution 漏洞描述 Spring MVC and Spring WebFlux applications running on Java Development Kit 9+ are susceptible to remote code execut...

漏洞标题 CVE-2023-1671: Sophos Web Appliance - Remote Code Execution 漏洞描述 A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older t...

漏洞标题 CVE-2023-52251: Kafka UI 0.7.1 Command Injection 漏洞描述 An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code v...

漏洞标题 CVE-2021-26855: Microsoft Exchange Server Remote Code Execution 漏洞描述 Microsoft Exchange Server Remote Code Execution Vulnerability PoC代码

漏洞标题 CVE-2024-7313: Shield Security Plugin < 20.0.6 - Cross-Site Scripting 漏洞描述 The Shield Security WordPress plugin before 20.0.6 contains a reflected cross-site script...

漏洞标题 CVE-2022-24384: SmarterTools SmarterTrack - Cross-Site Scripting 漏洞描述 Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: Smarter...

漏洞标题 CVE-2019-6799: phpMyAdmin <4.8.5 - Local File Inclusion 漏洞描述 phpMyAdmin before 4.8.5 is susceptible to local file inclusion. When the AllowArbitraryServer configura...

本文转载于公众号：融云攻防实验室，原文地址： 漏洞复现 通达OA v2017 Action_upload任意文件上传漏洞 通达OA（OfficeAnywhere网络智能办公系统）是由北京通达信科科技有限公司自主研发的协同...