漏洞标题 CVE-2023-4284: WordPress Post Timeline Plugin < 2.2.6 - Cross-Site Scripting 漏洞描述 The Post Timeline WordPress plugin before version 2.2.6 contains a reflected cross...

漏洞标题 CVE-2008-6668: nweb2fax <=0.2.7 - Local File Inclusion 漏洞描述 nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via the id parameter submitted...

漏洞标题 Cartadis Gespage 8.2.1 存在目录遍历漏洞(CVE-2021-33807) 漏洞描述 Cartadis Gespage 8.2.1版本存在目录遍历漏洞，攻击者可利用此漏洞获取敏感信息。 PoC代码 暂无

漏洞标题 CVE-2024-25608: Liferay Portal - Open Redirect 漏洞描述 HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7...

漏洞标题 CVE-2018-1207: Dell iDRAC7/8 Devices - Remote Code Injection 漏洞描述 Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a CGI injection vulnerability which cou...

漏洞标题 CVE-2025-2711: Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting 漏洞描述 Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting (XSS) via the langcode par...

漏洞标题 Ametys CMS CVE-2022-26159信息泄露漏洞 漏洞描述 Ametys CMS 存在信息泄露漏洞，此漏洞是缺乏校验导致的。 PoC代码 暂无

漏洞标题 CVE-2021-24278: WordPress Contact Form 7 <2.3.4 - Arbitrary Nonce Generation 漏洞描述 WordPress Contact Form 7 before version 2.3.4 allows unauthenticated users to use ...

漏洞标题 CVE-2021-24926: WordPress Domain Check <1.0.17 - Cross-Site Scripting 漏洞描述 WordPress Domain Check plugin before 1.0.17 contains a reflected cross-site scripting vul...

下载地址：http://i0x0fy4ibf.feishu.cn/file/boxcnMmfJEQCTDLUjcxMXoy5SUb 简要概述：《Web之困》的第二章

漏洞标题 CVE-2022-2546: WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting 漏洞描述 WordPress All-in-One WP Migration plugin 7.62 and prior contains a cross-site sc...

漏洞标题 CVE-2022-0206: WordPress NewStatPress <1.3.6 - Cross-Site Scripting 漏洞描述 WordPress NewStatPress plugin before 1.3.6 is susceptible to cross-site scripting. The plug...

对十七期提到的弱口令规则，对于涉及到域名或公司的提取出来，写了个脚本一键梭哈。 如果常规的top字典没有用，可以尝试跑一下这个。 http://github.com/fcre1938/PwdBUD 已完成的规则: 域名+工...

漏洞标题 CVE-2019-20224: Pandora FMS 7.0NG - Remote Command Injection 漏洞描述 Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metach...

漏洞报告 【MCUboot】private keys exposed on the GitHub repository http://hackerone.com/reports/1234531 【XVIDEOS】CSRF on delete friend requests - Not protected with CSRF Token htt...

漏洞标题 CVE-2023-20073: Cisco VPN Routers - Unauthenticated Arbitrary File Upload 漏洞描述 A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and...