漏洞标题 CVE-2021-39152: XStream <1.4.18 - Server-Side Request Forgery 漏洞描述 XStream before 1.4.18 is susceptible to server-side request forgery. An attacker can request data...

漏洞标题 CVE-2019-10758: mongo-express Remote Code Execution 漏洞描述 mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the `toBSON` method...

漏洞标题 CVE-2023-6246: glibc's syslog - Local Privilege Escalation 漏洞描述 A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. Th...

漏洞标题 CVE-2021-41691: openSIS Student Information System 8.0 SQL Injection 漏洞描述 openSIS Student Information System version 8.0 is susceptible to SQL injection via the studen...

这篇文章主要介绍了Nginx与Lua灰度发布的实现，文中通过示例代码介绍的非常详细，对大家的学习或者工作具有一定的参考学习价值，需要的朋友们下面随着小编来一起学习学习吧 安装 memcached yum ...

漏洞标题 CVE-2020-9425: rConfig <3.9.4 - Sensitive Information Disclosure 漏洞描述 rConfig prior to version 3.9.4 is susceptible to sensitive information disclosure. An unauthen...

漏洞标题 CVE-2022-0535: WordPress E2Pdf <1.16.45 - Cross-Site Scripting 漏洞描述 WordPress E2Pdf plugin before 1.16.45 contains a cross-site scripting vulnerability. The plugin ...

这篇文章主要介绍了SNMP4J服务端连接超时问题解决方案,文中通过示例代码介绍的非常详细，对大家的学习或者工作具有一定的参考学习价值,需要的朋友可以参考下 我们的网络管理中心作为管理中心，...

漏洞标题 CVE-2016-2389: SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion 漏洞描述 SAP xMII 15.0 for SAP NetWeaver 7.4 is susceptible to a local file inclusion vulnerabili...

漏洞标题 CVE-2020-35848: Agentejo Cockpit <0.12.0 - NoSQL Injection 漏洞描述 Agentejo Cockpit prior to 0.12.0 is vulnerable to NoSQL Injection via the newpassword method of the ...

漏洞标题 CVE-2014-4536: Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting 漏洞描述 Multiple cross-site scripting vulnerabilities in tests/notAuto_test_ContactServ...

漏洞标题 CVE-2012-4547: AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting 漏洞描述 AWStats is prone to multiple cross-site scripting vulnerabilities because the applic...

漏洞标题 CVE-2017-20192: Formidable Forms < 2.05.02 - Cross-Site Scripting 漏洞描述 Formidable Form Builder for WordPress versions before 2.05.03 contains a stored cross-site sc...

漏洞标题 CVE-2023-6553: Worpress Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution 漏洞描述 The Backup Migration plugin for WordPress is vulnerable to Remote Cod...

文章来源：https://github.com/djytmdj/Network-security-study-notes 前言 背景介绍：一个sql注入点进去，无绝对路径，写入webshel 操作 抓包 注入 sqlmap 的--os-shell 获取一个交互权限 查看...

微软本月的累积更新如期而至，共修复了包括三个0day在内的71个漏洞（另外还有21个Microsoft Edge漏洞）。漏洞主要影响到.NET和Visual Studio、Azure、Microsoft Defender、Exchange Server、Edg...