渗透云记 -专注于网络安全与技术分享-最新发布-第861页

最新发布第861页

CVE-2023-40755: PHPJabbers Callback Widget v1.0 – Cross-Site Scripting

漏洞标题 CVE-2023-40755: PHPJabbers Callback Widget v1.0 - Cross-Site Scripting 漏洞描述 There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of p...

云记2023年6月16日 21:23

CVE-2024-36837: CRMEB v.5.2.2 – SQL Injection

漏洞标题 CVE-2024-36837: CRMEB v.5.2.2 - SQL Injection 漏洞描述 SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getPro...

付费阅读100 漏洞库 # CVE-2024 # sql注入 # CRM

云记2024年2月4日 10:32

CVE-2023-37679: NextGen Mirth Connect – Remote Code Execution

漏洞标题 CVE-2023-37679: NextGen Mirth Connect - Remote Code Execution 漏洞描述 Mirth Connect, by NextGen HealthCare, is an open source data integration platform widely used by hea...

付费阅读100 漏洞库 # rce # CVE-2023 # CVE-2023-37679

云记2023年12月19日 05:03

CVE-2022-0952: WordPress Sitemap by click5 <1.0.36 - Missing Authorization

漏洞标题 CVE-2022-0952: WordPress Sitemap by click5 <1.0.36 - Missing Authorization 漏洞描述 WordPress Sitemap by click5 plugin before 1.0.36 is susceptible to missing authoriza...

付费阅读100 漏洞库 # CVE-2022 # wordpress # csrf

云记2022年12月24日 08:56

CVE-2023-23489: WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 – SQL Injection

漏洞标题 CVE-2023-23489: WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection 漏洞描述 WordPress Easy Digital Downloads plugin 3.1.0.2 and 3.1.0.3 contains a SQL inject...

付费阅读100 漏洞库 # CVE-2023 # sql注入 # EAS

云记2023年5月25日 20:08

CVE-2018-10822: D-Link Routers – Local File Inclusion

漏洞标题 CVE-2018-10822: D-Link Routers - Local File Inclusion 漏洞描述 D-Link routers DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02,DWR-512 through 2.02,DWR-7...

付费阅读100 漏洞库 # lfi # CVE-2018 # D-Link

云记2018年12月30日 01:57

CVE-2019-6112: WordPress Sell Media 2.4.1 – Cross-Site Scripting

漏洞标题 CVE-2019-6112: WordPress Sell Media 2.4.1 - Cross-Site Scripting 漏洞描述 WordPress Plugin Sell Media v2.4.1 contains a cross-site scripting vulnerability in /inc/class-se...

付费阅读100 漏洞库 # xss # CVE-2019 # CVE-2019-6112

云记2019年9月10日 23:20

CVE-2021-37415: Zoho ManageEngine ServiceDesk Plus – Authentication Bypass

漏洞标题 CVE-2021-37415: Zoho ManageEngine ServiceDesk Plus - Authentication Bypass 漏洞描述 Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass ...

付费阅读100 漏洞库 # CVE-2021 # 认证绕过 # Zoho ManageEngine

云记2021年4月5日 07:50

CVE-2022-2373: WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure

漏洞标题 CVE-2022-2373: WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure 漏洞描述 WordPress Simply Schedule Appointments plugin before 1.5.7.7 is suscept...

付费阅读100 漏洞库 # CVE-2022 # wordpress # CVE-2022-2373

云记2022年10月10日 18:22

CVE-2025-31486: Vite server.fs.deny Bypass – Local File Inclusion

漏洞标题 CVE-2025-31486: Vite server.fs.deny Bypass - Local File Inclusion 漏洞描述 Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be retu...

付费阅读100 漏洞库 # lfi # CVE-2025 # Vi

云记2025年9月18日 06:55

CVE-2021-27250: D-LINK DAP-2020 webproc 任意文件读取漏洞

漏洞标题 CVE-2021-27250: D-LINK DAP-2020 webproc 任意文件读取漏洞漏洞描述 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected instal...

付费阅读100 漏洞库 # CVE-2021 # D-Link # CVE-2021-27250

云记2021年10月6日 21:42

CVE-2023-7246: System Dashboard < 2.8.10 - Cross-Site Scripting

漏洞标题 CVE-2023-7246: System Dashboard < 2.8.10 - Cross-Site Scripting 漏洞描述 The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameter...

付费阅读100 漏洞库 # xss # CVE-2023 # Dash

云记2023年1月23日 14:54