漏洞标题 CVE-2023-2023: Custom 404 Pro < 3.7.3 - Cross-Site Scripting 漏洞描述 Custom 404 Pro before 3.7.3 is susceptible to cross-site scripting via the search parameter due to...

漏洞标题 CVE-2021-24239: WordPress Pie Register <3.7.0.1 - Cross-Site Scripting 漏洞描述 WordPress Pie Register plugin before 3.7.0.1 is susceptible to cross-site scripting. The...

漏洞标题 CVE-2023-51409: Jordy Meow AI Engine - Unrestricted File Upload 漏洞描述 Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine- ChatGPT Cha...

漏洞标题 CVE-2023-23491: Quick Event Manager < 9.7.5 - Cross-Site Scripting 漏洞描述 The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cro...

漏洞标题 CVE-2021-24875: WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting 漏洞描述 WordPress eCommerce Product Catalog plugin before 3.0.39 contains a cross-si...

漏洞标题 CVE-2022-0206: WordPress NewStatPress <1.3.6 - Cross-Site Scripting 漏洞描述 WordPress NewStatPress plugin before 1.3.6 is susceptible to cross-site scripting. The plug...

漏洞标题 CVE-2023-41597: EyouCms v1.6.2 - Cross-Site Scripting 漏洞描述 EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the compon...

漏洞标题 CVE-2022-1916: WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting 漏洞描述 WordPress Active Products Tables for WooCommerce plugin prior to ...

漏洞标题 CVE-2022-4897: WordPress BackupBuddy <8.8.3 - Cross Site Scripting 漏洞描述 WordPress BackupBuddy plugin before 8.8.3 contains a cross-site vulnerability. The plugin do...

漏洞标题 CVE-2010-2682: Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the Realtyna Translator (com_realtyna) c...

漏洞报告 【Kubernetes 1000刀】用于 kube-apiserver cloudprovider 场景的 SSRF http://hackerone.com/reports/941178 挖洞技巧 1、浅谈云上攻防--SSRF漏洞带来的新威胁 http://mp.weixin.qq.c...

漏洞标题 CVE-2022-38131: RStudio Connect - Open Redirect 漏洞描述 RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacke...

0x01 前言 上篇回顾，主要讲述了企业根域名的收集方法，如ICP、公司股权、DNS解析、whois数据、ssl证书等。本篇文章主要讲讲子域名发现。 0x02 我的子域名发现流程 0x03 通过第三方数据源收集 ...

漏洞标题 CVE-2024-29972: Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account 漏洞描述 The command injection vulnerability in the CGI program "remote_...

漏洞报告 【Traffic Factory】WordPress Plugin Update Confusion at trafficfactory.com http://hackerone.com/reports/1364851 【Shopify】Sidekiq dashboard exposed at notary.shopifycloud...

大家好，本篇文章主要讲的是RHCE安装Apache,用浏览器访问IP，感兴趣的同学赶快来看一看吧，对你有帮助的话记得收藏一下，方便下次浏览 1.at 配置在5小时后，将 'This is a at task' 写入 root家...