漏洞标题 CVE-2022-43017: OpenCATS 0.9.6 - Cross-Site Scripting 漏洞描述 OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the indexFile component. An attacker can in...

漏洞标题 CVE-2023-4116: PHPJabbers Taxi Booking 2.0 - Cross Site Scripting 漏洞描述 A vulnerability classified as problematic was found in PHP Jabbers Taxi Booking 2.0. Affected by...

漏洞标题 CVE-2024-2862: LG LED Assistant - Unauthenticated Password Reset 漏洞描述 The /api/changePw endpoint in LG LED Assistant allows unauthenticated password resets when reques...

漏洞标题 CVE-2021-45046-DAST: Apache Log4j2 - Remote Code Injection 漏洞描述 Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-defau...

漏洞标题 CVE-2018-18778: ACME mini_httpd <1.30 - Local File Inclusion 漏洞描述 ACME mini_httpd before 1.30 is vulnerable to local file inclusion. PoC代码

漏洞标题 CVE-2025-2747: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006) 漏洞描述 An authentication bypass vulnerability in Kentico Xperience allows ...

漏洞标题 CVE-2023-4112: PHPJabbers Shuttle Booking Software 1.0 - Cross Site Scripting 漏洞描述 The attacker can send to victim a link containing a malicious URL in an email or ins...

漏洞标题 CVE-2025-24354: Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF) 漏洞描述 imgproxy contains an issue caused by not blocking the 0.0.0.0 address even when IMGPROXY...

漏洞标题 CVE-2020-13820: Extreme Management Center 8.4.1.24 - Cross-Site Scripting 漏洞描述 Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a p...

0x00 背景 “A ha ha ha ha ha，鸡汤来咯~”，只见老黑端上一锅鸡汤上来，说：“这这 这菜都齐了，怎么还不吃呀？”。 “老黑呀，这大伙儿都不敢吃”，二狗说到，“有人说，说是在公司有个内鬼...

漏洞标题 CVE-2024-1208: LearnDash LMS < 4.10.3 - Sensitive Information Exposure 漏洞描述 The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure i...

漏洞标题 CVE-2021-24931: WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection 漏洞描述 WordPress Secure Copy Content Protection and Content Lockin...

漏洞标题 CVE-2023-46574: TOTOLINK A3700R - Command Injection 漏洞描述 An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the ...

漏洞标题 CVE-2016-8527: Aruba Airwave <8.2.3.1 - Cross-Site Scripting 漏洞描述 Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting. PoC代码

前言 文章制作技术分享，请勿用于其他地方，产生的相关责任由使用者负全责。 相关阅读 Ettercap Ettercap是一个综合性的中间人攻击工具,它可以进行ARP欺骗DNS劫持,以欺骗方式的网络嗅探工具，主...

疫情当下，我发现喜欢读书的人真的是越来越多了，好久不读书，发现家里空空荡荡的，偶尔闲下来想看本书吧，发现该送的送该扔的扔了。这时候就真的是悔不当初。 也不是咱不舍得花那买书的钱，只...