漏洞标题 CVE-2022-0660: Microweber <1.2.11 - Information Disclosure 漏洞描述 Microweber before 1.2.11 is susceptible to information disclosure. An error message is generated in ...

漏洞标题 CVE-2021-21985: VMware vSphere Client (HTML5) - Remote Code Execution 漏洞描述 The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of inp...

漏洞标题 CVE-2016-3088: Apache ActiveMQ Fileserver - Arbitrary File Write 漏洞描述 Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files v...

漏洞标题 CVE-2022-0591: Formcraft3 <3.8.28 - Server-Side Request Forgery 漏洞描述 Formcraft3 before version 3.8.2 does not validate the URL parameter in the formcraft3_get AJAX ...

漏洞标题 CVE-2022-34048: Wavlink WN-533A8 - Cross-Site Scripting 漏洞描述 Wavlink WN-533A8 M33A8.V5030.190716 contains a reflected cross-site scripting vulnerability via the login_...

漏洞标题 CVE-2021-25082: WordPress Popup Builder < 4.0.7 - Remote Code Execution 漏洞描述 Popup Builder WordPress plugin before 4.0.7 contains a local file inclusion caused by u...

漏洞标题 Appspace服务端请求伪造漏洞(CVE-2021-27670) 漏洞描述 Appspace 6.2.4存在漏洞，允许通过api/v1/core/proxy/jsonprequest接口来进行服务端请求伪造，危害系统安全。 PoC代码 暂无

漏洞标题 CVE-2019-12986: Citrix SD-WAN Center - Remote Command Injection 漏洞描述 Citrix SD-WAN Center is susceptible to remote command injection via the trace_route function in Di...

漏洞标题 CVE-2016-10033: WordPress PHPMailer < 5.2.18 - Remote Code Execution 漏洞描述 WordPress PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to...

漏洞标题 CVE-2022-48166: Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure 漏洞描述 An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthe...

漏洞标题 CVE-2023-41642: RealGimm by GruppoSCAI v1.1.37p38 - Cross-Site Scripting 漏洞描述 Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.asp...

漏洞标题 CVE-2023-6018: Mlflow - Arbitrary File Write 漏洞描述 An attacker can overwrite any file on the server hosting MLflow without any authentication. PoC代码

漏洞标题 CVE-2019-1003000: Jenkins Script Security Plugin <=1.49 - Sandbox Bypass 漏洞描述 A sandbox bypass vulnerability exists in the Jenkins Script Security Plugin (versions ...

漏洞标题 CVE-2023-40749: PHPJabbers Food Delivery Script v3.0 - SQL Injection 漏洞描述 PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column"...

漏洞标题 CVE-2024-35694: Wordpress WPMobile.App >= 11.42 - Cross-Site Scripting 漏洞描述 WPMobile.App versions up to 11.41 contain a reflected cross-site scripting (XSS) caused ...

漏洞标题 CVE-2022-0928: Microweber < 1.2.12 - Stored Cross-Site Scripting 漏洞描述 Microweber prior to 1.2.12 contains a stored cross-site scripting vulnerability via the Type p...