漏洞标题 CVE-2023-22518: Atlassian Confluence Server - Improper Authorization 漏洞描述 All versions of Confluence Data Center and Server are affected by this unexploited vulnerabil...

免责声明 本文发布的工具和脚本，仅用作测试和学习研究，禁止用于商业用途，不能保证其合法性，准确性，完整性和有效性，请根据情况自行判断。如果任何单位或个人认为该项目的脚本可能涉嫌侵犯...

漏洞标题 CVE-2021-27931: LumisXP <10.0.0 - Blind XML External Entity Attack 漏洞描述 LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XML exter...

漏洞标题 CVE-2019-25213: WordPress Advanced Access Manager - Path Traversal 漏洞描述 The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary Fil...

漏洞标题 CVE-2024-10486: Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File 漏洞描述 The Google for WooCommerce plugin for WordPress ...

漏洞标题 CVE-2016-1000133: WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting 漏洞描述 Wordpress plugin forget-about-shortcode-buttons 1.1.1 contains a reflected...

漏洞标题 CVE-2023-24737: PMB v7.4.6 - Cross-Site Scripting 漏洞描述 PMB v7.4.6 allows an attacker to perform a reflected XSS on export_z3950.php via the 'query' parameter...

前言 其实这篇教程本来是不准备出的，网上已经有很多很多类似的了（真的很烦把同一个东西抄过来抄过去，搜的人半天解决不了问题，很浪费精力的） 可是为什么有准备写这篇重复文章呢，昨天十分钟...

漏洞标题 CVE-2021-35587: Oracle Access Manager - Remote Code Execution 漏洞描述 The Oracle Access Manager portion of Oracle Fusion Middleware (component: OpenSSO Agent) is vulnerab...

漏洞标题 CVE-2020-16139: Cisco Unified IP Conference Station 7937G - Denial-of-Service 漏洞描述 Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers t...

漏洞标题 CVE-2025-34031: Moodle Jmol Filter 6.1 - Local File Inclusion 漏洞描述 Moodle Jmol Filter 6.1 is vulnerable to local file inclusion through the jsmol.php file, allowing at...

漏洞标题 CVE-2017-9288: WordPress Raygun4WP <=1.8.0 - Cross-Site Scripting 漏洞描述 WordPress Raygun4WP 1.8.0 contains a reflected cross-site scripting vulnerability via sendtes...

漏洞标题 CVE-2024-9989: Crypto <= 2.15 - Authentication Bypass 漏洞描述 The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, ...

Linux 在已知恶意域名/IP的情况下，可以通过边界设备查询首次域名解析、IP通联的时间，基于时间信息往往就可以定位到恶意进程及文件位置。 例如首次域名/IP出现的时间为2024年7月2日，可以查询2...

漏洞标题 CVE-2022-36553: Hytec Inter HWL-2511-SS - Remote Command Execution 漏洞描述 Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerabi...

漏洞标题 CVE-2022-48012: OpenCATS 0.9.7 - Cross-Site Scripting 漏洞描述 OpenCATS 0.9.7 contains a cross-site scripting vulnerability via the component /opencats/index.php?m=setting...