漏洞标题 CVE-2023-0669: Fortra GoAnywhere MFT - Remote Code Execution 漏洞描述 Fortra GoAnywhere MFT is susceptible to remote code execution via unsafe deserialization of an arbitr...

现在越来越多的网站前后端分离，javascript代码基本都会使用webpack这样的工具进行打包，打包过后的javascript代码会被混淆压缩，一个js文件就上万行代码，增加了读取javascript源码业务逻辑的...

漏洞标题 CVE-2021-36748: PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection 漏洞描述 PrestaHome Blog for PrestaShop prior to version 1.7.8 is vulnerable to a SQL injection (b...

漏洞标题 CVE-2025-4302: Stop User Enumeration WordPress plugin - Authentication Bypass 漏洞描述 Stop User Enumeration WordPress plugin < 1.7.3 contains an authentication bypass ...

漏洞标题 CVE-2015-4455: WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload 漏洞描述 Unrestricted file upload vulnerability in includes/up...

漏洞标题 CVE-2025-57808: ESPHome - Authentication Bypass 漏洞描述 ESPHome 2025.8.0 contains an authentication bypass caused by improper validation of base64-encoded Authorization v...

漏洞标题 (CVE-2025-64764) Astro服务器岛功能反射型XSS漏洞 漏洞描述 (CVE-2025-64764) Astro服务器岛功能反射型XSS漏洞 PoC代码 暂无

前言 近期awvs 14.6出来了，支持扫log4j2漏洞，对于我这种啥也不会的菜鸡看到了跃跃欲试，但是呢一添加扫描任务就失败了，问问火器内测群里的大佬，也有同样的问题，唉，没办法只能自己动手了，...

漏洞标题 CVE-2020-8615: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery 漏洞描述 A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in...

漏洞标题 CVE-2012-4547: AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting 漏洞描述 AWStats is prone to multiple cross-site scripting vulnerabilities because the applic...

漏洞标题 CVE-2021-24316: WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting 漏洞描述 WordPress Mediumish theme 1.0.47 and prior contains an unauthenticated reflected cros...

漏洞标题 CVE-2018-2791: Oracle Fusion Middleware WebCenter Sites - Cross-Site Scripting 漏洞描述 The Oracle WebCenter Sites component of Oracle Fusion Middleware is susceptible to ...

漏洞标题 CVE-2022-0781: WordPress Nirweb Support <2.8.2 - SQL Injection 漏洞描述 WordPress Nirweb support plugin before 2.8.2 contains a SQL injection vulnerability. The plugin ...

漏洞标题 CVE-2018-7314: Joomla! Component PrayerCenter 3.0.2 - SQL Injection 漏洞描述 SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid paramet...

漏洞标题 CVE-2018-15745: Argus Surveillance DVR 4.0.0.0 - Local File Inclusion 漏洞描述 Argus Surveillance DVR 4.0.0.0 devices allow unauthenticated local file inclusion, leading t...

漏洞标题 CVE-2023-2813: Wordpress Multiple Themes - Reflected Cross-Site Scripting 漏洞描述 All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, A...