漏洞标题 CVE-2023-1177: MLflow get-artifact 任意文件读取漏洞 漏洞描述 使用 MLflow 模型注册表托管 MLflow 开源项目的用户 mlflow server或者 mlflow ui使用早于 MLflow 2.2.1 的 MLflow 版...

漏洞标题 CVE-2021-31682: WebCTRL OEM <= 6.5 - Cross-Site Scripting 漏洞描述 WebCTRL OEM 6.5 and prior is susceptible to a cross-site scripting vulnerability because the login po...

漏洞标题 CVE-2021-32172: Maian Cart <=3.8 - Remote Code Execution 漏洞描述 Maian Cart 3.0 to 3.8 via the elFinder file manager plugin contains a remote code execution vulnerabil...

漏洞标题 CVE-2024-29931: WP Go Maps <= 9.0.29 - Cross-Site Scripting 漏洞描述 WP Go Maps (formerly WP Google Maps) plugin for WordPress versions before 9.0.30 is vulnerable to R...

漏洞标题 CVE-2020-24881: OsTicket < 1.14.3 - Server Side Request Forgery 漏洞描述 SSRF vulnerability exists in osTicket before 1.14.3, allowing an attacker to add malicious file...

这篇文章主要给大家介绍了关于Tomcat将配置文件放在外部的相关资料，对平时工作来说还是挺实用的，需要的朋友们下面随着小编一起来看看吧 问题 我们在平常开发的时候, 如果要把项目部署到Tomcat...

漏洞标题 CVE-2019-10758: mongo-express Remote Code Execution 漏洞描述 mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the `toBSON` method...

漏洞标题 CVE-2022-0432: Mastodon Prototype Pollution Vulnerability 漏洞描述 The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype Pollution vulnerability. PoC...

漏洞报告 Microsoft Azure 【40000刀】ChaosDB: Unauthorized Privileged Access to Microsoft Azure Cosmos DB ChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog ...

漏洞标题 CVE-2022-24681: ManageEngine ADSelfService Plus <6121 - Stored Cross-Site Scripting 漏洞描述 ManageEngine ADSelfService Plus before 6121 contains a stored cross-site sc...

漏洞标题 CVE-2024-4348: osCommerce v4.0 - Cross-site Scripting 漏洞描述 A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown func...

漏洞标题 CVE-2022-41473: RPCMS 3.0.2 - Cross-Site Scripting 漏洞描述 RPCMS 3.0.2 contains a cross-site scripting vulnerability in the Search function. An attacker can inject arbitr...

漏洞标题 CVE-2011-5179: Skysa App Bar 1.04 - Cross-Site Scripting 漏洞描述 A cross-site scripting vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, pos...

漏洞标题 CData Sync CVE-2024-31851 路径遍历漏洞 漏洞描述 CData sync存在路径遍历漏洞，此漏洞是由于/ui/接口对用户的请求验证不当造成的。 PoC代码 暂无

漏洞标题 CVE-2020-5776: MAGMI - Cross-Site Request Forgery 漏洞描述 MAGMI (Magento Mass Importer) is vulnerable to cross-site request forgery (CSRF) due to a lack of CSRF tokens. R...

漏洞标题 CVE-2020-10547: rConfig 3.9.4 - SQL Injection 漏洞描述 rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because node...