最新发布第312页
CVE-2023-51449: Gradio Hugging Face - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2023-51449: Gradio Hugging Face – Local File Inclusion

漏洞标题 CVE-2023-51449: Gradio Hugging Face - Local File Inclusion 漏洞描述 Gradio LFI when auth is not enabled, affects versions 4.0 - 4.10, also works against Gradio < 3.33 P...
CVE-2017-18598: WordPress Qards - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2017-18598: WordPress Qards – Cross-Site Scripting

漏洞标题 CVE-2017-18598: WordPress Qards - Cross-Site Scripting 漏洞描述 WordPress Qards through 2017-10-11 contains a cross-site scripting vulnerability via a remote document spec...
CVE-2022-32430: Lin CMS Spring Boot - Default JWT Token-渗透云记 - 专注于网络安全与技术分享

CVE-2022-32430: Lin CMS Spring Boot – Default JWT Token

漏洞标题 CVE-2022-32430: Lin CMS Spring Boot - Default JWT Token 漏洞描述 An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information a...
Atlassian Jira SSRF漏洞 (CVE-2019-8451)-渗透云记 - 专注于网络安全与技术分享

Atlassian Jira SSRF漏洞 (CVE-2019-8451)

漏洞标题 Atlassian Jira SSRF漏洞 (CVE-2019-8451) 漏洞描述 Atlassian Jira SSRF漏洞 (CVE-2019-8451) PoC代码 暂无
CVE-2023-34751: bloofoxCMS v0.5.2.1 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-34751: bloofoxCMS v0.5.2.1 – SQL Injection

漏洞标题 CVE-2023-34751: bloofoxCMS v0.5.2.1 - SQL Injection 漏洞描述 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index....
CVE-2022-46463: Harbor <=2.5.3 - Unauthorized Access-渗透云记 - 专注于网络安全与技术分享

CVE-2022-46463: Harbor <=2.5.3 - Unauthorized Access

漏洞标题 CVE-2022-46463: Harbor <=2.5.3 - Unauthorized Access 漏洞描述 An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image rep...
Atlassian Jira 用户枚举(CVE-2019-3403)-渗透云记 - 专注于网络安全与技术分享

Atlassian Jira 用户枚举(CVE-2019-3403)

漏洞标题 Atlassian Jira 用户枚举(CVE-2019-3403) 漏洞描述 8.1.1之前的Jira通过searchOwnerUserName参数中的ConfigurePortalPages.jspa资源包含跨站点脚本漏洞。 PoC代码 暂无
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2019年5月21日 06:08
40
CVE-2025-49706: Microsoft SharePoint Server - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2025-49706: Microsoft SharePoint Server – Authentication Bypass

漏洞标题 CVE-2025-49706: Microsoft SharePoint Server - Authentication Bypass 漏洞描述 Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perf...
CVE-2021-43831: Gradio < 2.5.0 - Arbitrary File Read-渗透云记 - 专注于网络安全与技术分享

CVE-2021-43831: Gradio < 2.5.0 - Arbitrary File Read

漏洞标题 CVE-2021-43831: Gradio < 2.5.0 - Arbitrary File Read 漏洞描述 Files on the host computer can be accessed from the Gradio interface PoC代码
CVE-2022-32430: Lin CMS Spring Boot - Default JWT Token-渗透云记 - 专注于网络安全与技术分享

CVE-2022-32430: Lin CMS Spring Boot – Default JWT Token

漏洞标题 CVE-2022-32430: Lin CMS Spring Boot - Default JWT Token 漏洞描述 An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information a...
CVE-2024-6586: Lightdash v0.1024.6 - Server-Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2024-6586: Lightdash v0.1024.6 – Server-Side Request Forgery

漏洞标题 CVE-2024-6586: Lightdash v0.1024.6 - Server-Side Request Forgery 漏洞描述 Server-Side Request Forgery (“SSRF”) in the export dashboard functionality of Lightdash version...
CVE-2022-32430: Lin CMS Spring Boot - Default JWT Token-渗透云记 - 专注于网络安全与技术分享

CVE-2022-32430: Lin CMS Spring Boot – Default JWT Token

漏洞标题 CVE-2022-32430: Lin CMS Spring Boot - Default JWT Token 漏洞描述 An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information a...
CVE-2021-40542: Opensis-Classic 8.0 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-40542: Opensis-Classic 8.0 – Cross-Site Scripting

漏洞标题 CVE-2021-40542: Opensis-Classic 8.0 - Cross-Site Scripting 漏洞描述 Opensis-Classic Version 8.0 is affected by cross-site scripting. An unauthenticated user can inject and...
CVE-2025-34032: Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2025-34032: Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting

漏洞标题 CVE-2025-34032: Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting 漏洞描述 A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年6月14日 12:50
40
CVE-2010-1305: Joomla! Component JInventory 1.23.02 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2010-1305: Joomla! Component JInventory 1.23.02 – Local File Inclusion

漏洞标题 CVE-2010-1305: Joomla! Component JInventory 1.23.02 - Local File Inclusion 漏洞描述 A directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory...
CVE-2025-34032: Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2025-34032: Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting

漏洞标题 CVE-2025-34032: Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting 漏洞描述 A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin ...
漏洞复现
漏洞复现,安全小天地的技术文章仅供参考,此文所提供的信息只为网络安全人员对自己所负责的网站、服务器等(包括但不限于)进行检测或维护参考,未经授权请勿利用文章中的技术资料对任何计算机系统进行入侵操作。利用此文所提供的信息而造成的直接或间接后果和损失,均由使用者本人负责。本文所提供的工具仅用于学习,禁止用于其他!!!
168篇文章更多文章
白帽黑客
白帽黑客网络用语中指站在黑客的立场攻击自己的系统以进行安全漏洞排查的程序员。他们用的是黑客(一般指“黑帽子黑客”)惯用的破坏攻击的方法,行的却是维护安全之事
274篇文章更多文章
渗透测试实战
在渗透测试项目中,外网的信息收集是至关重要的一个环节,外网打点信息收集全面了,可能会有四两拨千斤效果,直接突破外网边界进入内网。 子域名是域名信息收集的一个重要部分,在防御措施严密情况下我们无法直接拿下主域名,那么就可以采用迂回战术拿下子域名,然后无限靠近主域名。
22篇文章更多文章
2026年4月24日 17:11
2026年4月7日 21:49
2026年2月13日 12:53