漏洞标题 CVE-2019-10475: Jenkins build-metrics 1.3 - Cross-Site Scripting 漏洞描述 Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that al...

漏洞标题 CVE-2020-10199: Sonatype Nexus Repository Manager 3 - Remote Code Execution 漏洞描述 Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection PoC代码

VK，全称VKontakte，是俄罗斯及独联体国家最流行的社交媒体平台，拥有超过6.5亿用户。VK已决定在其服务中引入2FA（two-factor authentication，双因素身份认证）。从明年二月开始，所有订阅人数...

漏洞标题 CVE-2022-1119: WordPress Simple File List <3.2.8 - Local File Inclusion 漏洞描述 WordPress Simple File List before 3.2.8 is vulnerable to local file inclusion via the e...

漏洞标题 CVE-2010-1478: Joomla! Component Jfeedback 1.2 - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) c...

漏洞标题 CVE-2020-2036: Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting 漏洞描述 PAN-OS management web interface is vulnerable to reflected cross-site scripting. A r...

漏洞标题 CVE-2024-45309: OneDev.io < 11.0.9 - Arbitrary File Read 漏洞描述 Files on the host computer can be accessed by directory traversal. PoC代码

漏洞标题 CVE-2020-11034: GLPI <9.4.6 - Open Redirect 漏洞描述 GLPI prior 9.4.6 contains an open redirect vulnerability based on a regexp. PoC代码

漏洞标题 CVE-2021-39501: EyouCMS 1.5.4 Open Redirect 漏洞描述 EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via ...

漏洞标题 CVE-2024-36837: CRMEB开源电商系统 /api/products SQL注入漏洞(CVE-2024-36837) 漏洞描述 该漏洞可以通过请求api的路径接口来进行SQL注入，进而可能导致敏感信息泄露，该注入可暴露后...

漏洞标题 CVE-2020-11853: Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution 漏洞描述 Micro Focus Operations Bridge Manager in versions 2020.05 and below is ...

漏洞标题 CVE-2023-33831: FUXA - Unauthenticated Remote Code Execution 漏洞描述 A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows a...

漏洞标题 CVE-2025-27225: TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal 漏洞描述 TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allow...

漏洞标题 CVE-2021-24917: WordPress WPS Hide Login <1.9.1 - Information Disclosure 漏洞描述 WordPress WPS Hide Login plugin before 1.9.1 is susceptible to incorrect authorization...

漏洞标题 CVE-2021-35395: RealTek Jungle SDK - Arbitrary Command Injection 漏洞描述 There is a command injection vulnerability on the "formWsc" page of the management inte...

漏洞标题 CVE-2020-35131: Cockpit CMS 0.6.1 - Remote Code Execution 漏洞描述 Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution v...