漏洞标题 CVE-2024-24112: Exrick XMall - SQL Injection 漏洞描述 XMall v1.1 was discovered to contain a SQL injection vulnerability via the 'orderDir' parameter. PoC代码

漏洞标题 CVE-2019-16931: WordPress Visualizer <3.3.1 - Cross-Site Scripting 漏洞描述 WordPress Visualizer plugin before 3.3.1 contains a stored cross-site scripting vulnerabilit...

漏洞标题 CVE-2023-4911: Looney Tunables Linux - Local Privilege Escalation 漏洞描述 A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processi...

本文转载于公众号：融云攻防实验室，原文地址： 漏洞复现-Redis未授权利用 Redis 默认情况下，会绑定在 0.0.0.0:6379，如果没有进行采用相关的策略，比如添加防火墙规则避免其他非信任来源 ip ...

欢迎来到西南某最大卖鞋厂商 !三叶草安全技术小组（Syclover） 当黑客帝国的梦想成为现实，你就是下一个奇迹缔造者！三叶草安全技术小组（Syclover）等待着同样热爱技术的你~ 打开网页随便翻翻...

漏洞标题 CVE-2021-24176: WordPress JH 404 Logger <=1.1 - Cross-Site Scripting 漏洞描述 WordPress JH 404 Logger plugin through 1.1 contains a cross-site scripting vulnerability. ...

漏洞标题 CVE-2024-7313: Shield Security Plugin < 20.0.6 - Cross-Site Scripting 漏洞描述 The Shield Security WordPress plugin before 20.0.6 contains a reflected cross-site script...

漏洞标题 CVE-2019-18217: ProFTPD < 1.3.6b - Remote Unauthenticated DoS 漏洞描述 ProFTPD versions before 1.3.6b and various pre-release versions (1.3.7rc before 1.3.7rc2) are vul...

漏洞标题 CVE-2021-3378: FortiLogger 4.4.2.2 - Arbitrary File Upload 漏洞描述 FortiLogger 4.4.2.2 is affected by arbitrary file upload issues. Attackers can send a "Content-Typ...

漏洞标题 CVE-2024-58136: Yii2 PHP Framework < 2.0.52 - Remote Code Execution 漏洞描述 Yii2 PHP Framework before 2.0.52 is vulnerable to remote code execution via improper valida...

漏洞标题 CVE-2020-23015: OPNsense <=20.1.5 - Open Redirect 漏洞描述 OPNsense through 20.1.5 contains an open redirect vulnerability via the url redirect parameter in the login p...

本文转载于公众号：融云攻防实验室，原文地址： 漏洞复现 CVE-2021-3129 Laravel Debug mode RCE Laravel自带的Ignition组件在开启了Debug模式时，file_get_contents()和file_put_contents()函...

漏洞标题 CVE-2017-17731: DedeCMS 5.7 - SQL Injection 漏洞描述 DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php. PoC代码

漏洞标题 CVE-2020-35359: Pure-FTPd 1.0.48 - Denial of Service 漏洞描述 Pure-FTPd 1.0.48 is vulnerable to Denial of Service via exhaustion of connections due to lack of proper conne...

漏洞标题 CVE-2016-1000153: WordPress Tidio Gallery <=1.1 - Cross-Site Scripting 漏洞描述 WordPress plugin tidio-gallery v1.1 contains a reflected cross-site scripting vulnerabil...

有回显，用以下poc直接读取/etc/passwd： <?xml version='1.0'?> <!DOCTYPE foo [ <!ELEMENT foo (#ANY)> <!ENTITY xxe SYSTEM 'file:///etc/passwd'>]><foo>&am...