漏洞标题 CVE-2022-4321: PDF Generator for WordPress < 1.1.2 - Cross Site Scripting 漏洞描述 The plugin includes a vendored dompdf example file which is susceptible to Reflected ...

漏洞标题 CVE-2022-31101: Prestashop Blockwishlist 2.1.0 SQL Injection 漏洞描述 Prestashop Blockwishlist module version 2.1.0 suffers from a remote authenticated SQL injection vulne...

1. 前言 渗透的本质是信息收集，这里整理了一些渗透搜索引擎，帮你提高信息收集的效率，找到互联网背后的脆弱面，以下例举的搜索引擎排名不分先后。 2. 国内 2.1 fofa 官网：http://fofa.info/F...

在Github上搜寻好用的安全工具，来充实武器库，实属一大乐趣所在。 当看到ThinkPHP十年磨一剑的提示，那么今天这里分享的工具就可以派上用场了，一键检测ThinkPHP全版本漏洞。 01、TPscan 一键T...

漏洞标题 CVE-2022-0783: Multiple Shipping Address Woocommerce < 2.0 - SQL Injection 漏洞描述 The Multiple Shipping Address Woocommerce plugin before 2.0 does not properly saniti...

漏洞标题 CVE-2022-1713: Drawio <18.0.4 - Server-Side Request Forgery 漏洞描述 Drawio prior to 18.0.4 is vulnerable to server-side request forgery. An attacker can make a request...

漏洞标题 CVE-2022-47002: Masa CMS - Authentication Bypass 漏洞描述 Masa CMS 7.2, 7.3, and 7.4-beta are susceptible to authentication bypass in the Remember Me function. An attacker...

漏洞标题 CVE-2022-0149: WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting 漏洞描述 The plugin was affected by a reflected cross-site scripting vulnerab...

漏洞标题 CVE-2022-1904: WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting 漏洞描述 WordPress Easy Pricing Tables plugin before 3.2.1 contains a reflected cross-site sc...

漏洞标题 CVE-2022-26585: Mingsoft MCMS v5.2.7 - SQL Injection 漏洞描述 Mingsoft MCMS v5.2.7 contains an SQL injection vulnerability via /cms/content/list that allows unauthenticate...

漏洞标题 CVE-2022-40022: Symmetricom SyncServer Unauthenticated - Remote Command Execution 漏洞描述 Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a com...

漏洞标题 CVE-2022-38627: Nortek Linear eMerge E3-Series - SQL Injection 漏洞描述 Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32...

漏洞标题 CVE-2022-0786: WordPress KiviCare <2.3.9 - SQL Injection 漏洞描述 WordPress KiviCare plugin before 2.3.9 contains a SQL injection vulnerability. The plugin does not san...

漏洞标题 CVE-2022-34753: SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution 漏洞描述 SpaceLogic C-Bus Home Controller through 1.31.460 is susceptible to remo...

解题 一看是一个登录界面，尝试弱口令。密码直接爆出来了，但是FLAG不在这（这是大佬说的，我跑了半天，不知道弱密码是什么） 试了试，sql注入，半天感觉好像也不行，点一下help看看 是很熟悉的...

解题思路 首先登陆页面发现是这样的： 查看源码源码很正常，也没有什么特别的web 目录扫描 获取到robots.txt下面有一个备份文件 <?php class UserInfo { public $name = ''; public $age = 0...