渗透云记 -专注于网络安全与技术分享-最新发布-第398页

最新发布第398页

CVE-2024-2876: WordPress Email Subscribers by Icegram Express – SQL Injection

漏洞标题 CVE-2024-2876: Wordpress Email Subscribers by Icegram Express - SQL Injection 漏洞描述 The Email Subscribers by Icegram Express - Email Marketing, Newsletters, Automation ...

云记2024年12月29日 10:04

CVE-2024-25608: Liferay Portal – Open Redirect

漏洞标题 CVE-2024-25608: Liferay Portal - Open Redirect 漏洞描述 HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7...

付费阅读100 漏洞库 # CVE-2024 # Liferay Portal # CVE-2024-25608

云记2024年11月24日 01:39

CVE-2021-27748: IBM WebSphere HCL Digital Experience – Server-Side Request Forgery

漏洞标题 CVE-2021-27748: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery 漏洞描述 IBM WebSphere HCL Digital Experience is vulnerable to server-side request forge...

付费阅读100 漏洞库 # CVE-2021 # ssrf # CVE-2021-27748

云记2021年12月29日 15:11

CVE-2023-37580: Zimbra Collaboration Suite (ZCS) v.8.8.15 – Cross-Site Scripting

漏洞标题 CVE-2023-37580: Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting 漏洞描述 Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Clas...

付费阅读100 漏洞库 # xss # CVE-2023 # Zimbra Collaboration

云记2023年9月5日 17:17

CVE-2024-11587: idcCMS V1.60 – Cross-Site Scripting

漏洞标题 CVE-2024-11587: idcCMS V1.60 - Cross-Site Scripting 漏洞描述 idcCMS V1.60 is vulnerable to reflected cross-site scripting (XSS) via the idName parameter in read.php. Unsan...

付费阅读100 漏洞库 # xss # CVE-2024 # CVE-2024-11587

云记2024年6月15日 10:20

CVE-2025-11749: WordPress AI Engine Plugin – Token Exposure

漏洞标题 CVE-2025-11749: WordPress AI Engine Plugin - Token Exposure 漏洞描述 Unauthenticated sensitive information exposure in AI Engine WordPress plugin <= 3.1.3 exposes beare...

付费阅读100 漏洞库 # CVE-2025 # Gin # CVE-2025-11749

云记2025年6月9日 17:09

CVE-2025-9985: Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File

漏洞标题 CVE-2025-9985: Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File 漏洞描述 The Featured Image from URL (FIFU) plugin for WordPr...

付费阅读100 漏洞库 # CVE-2025 # FE # CVE-2025-9985

云记2025年7月31日 11:25

CVE-2010-1308: Joomla! Component SVMap 1.1.1 – Local File Inclusion

漏洞标题 CVE-2010-1308: Joomla! Component SVMap 1.1.1 - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allow...

付费阅读100 漏洞库 # lfi # CVE-2010 # CVE-2010-1308

云记2010年8月17日 04:38

CVE-2024-3300: Delmia Apriso – Pre-Authentication Unsafe .NET Object Deserialization

漏洞标题 CVE-2024-3300: Delmia Apriso - Pre-Authentication Unsafe .NET Object Deserialization 漏洞描述 An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release ...

付费阅读100 漏洞库 # rce # CVE-2024 # 反序列化

云记2024年7月11日 22:34

CVE-2018-1000129: Jolokia 1.3.7 – Cross-Site Scripting

漏洞标题 CVE-2018-1000129: Jolokia 1.3.7 - Cross-Site Scripting 漏洞描述 Jolokia 1.3.7 is vulnerable to cross-site scripting in the HTTP servlet and allows an attacker to execute m...

付费阅读100 漏洞库 # xss # CVE-2018 # CVE-2018-1000129

云记2018年10月9日 14:34

CVE-2023-30192: PrestaShop ‘possearchproducts’ <= 1.7 - SQL Injection

漏洞标题 CVE-2023-30192: PrestaShop 'possearchproducts' <= 1.7 - SQL Injection 漏洞描述 In the module “Search Products” (possearchproducts) from PosThemes for Presta...

付费阅读100 漏洞库 # CVE-2023 # sql注入 # SHOP++

云记2023年2月12日 19:40

CVE-2019-7238: Sonatype Nexus Repository Manager <3.15.0 - Remote Code Execution

漏洞标题 CVE-2019-7238: Sonatype Nexus Repository Manager <3.15.0 - Remote Code Execution 漏洞描述 Sonatype Nexus Repository Manager before 3.15.0 is susceptible to remote code ...

付费阅读100 漏洞库 # rce # CVE-2019 # Sonatype Nexus

云记2019年9月18日 17:00

CVE-2017-8046: Spring Data Rest RCE

漏洞标题 CVE-2017-8046: Spring Data Rest RCE 漏洞描述 SpringDataREST是一个构建在SpringData之上，为了帮助开发者更加容易地开发REST风格的Web服务。在RESTAPI的Patch方法中（实现RFC6902）...

付费阅读100 漏洞库 # rce # CVE-2017 # Ring

云记2017年5月31日 22:31

CVE-2010-1312: Joomla! Component News Portal 1.5.x – Local File Inclusion

漏洞标题 CVE-2010-1312: Joomla! Component News Portal 1.5.x - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the iJoomla News Portal (com_news_portal) compone...

付费阅读100 漏洞库 # lfi # CVE-2010 # Joomla

云记2010年6月24日 22:07

CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution

漏洞标题 CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution 漏洞描述 Spring Cloud Netflix Hystrix Dashboard prior to version 2.2.10 is suscep...

付费阅读100 漏洞库 # rce # CVE-2021 # Dash

云记2021年3月23日 09:56

CVE-2017-8917: Joomla SQL Injection

漏洞标题 CVE-2017-8917: Joomla SQL Injection 漏洞描述 SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified v...

付费阅读100 漏洞库 # sql注入 # CVE-2017 # Joomla

云记2017年8月11日 21:13