漏洞标题 CVE-2019-5434: Revive Adserver 4.2 - Remote Code Execution 漏洞描述 Revive Adserver 4.2 is susceptible to remote code execution. An attacker can send a crafted payload to ...

漏洞标题 CVE-2020-35847: Agentejo Cockpit <0.11.2 - NoSQL Injection 漏洞描述 Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword func...

漏洞标题 CVE-2022-0599: WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting 漏洞描述 WordPress Mapping Multiple URLs Redirect Same Page plugin 5.8 an...

漏洞标题 CVE-2022-23808: phpMyAdmin < 5.1.2 - Cross-Site Scripting 漏洞描述 An issue was discovered in phpMyAdmin 5.1 before 5.1.2 that could allow an attacker to inject malicio...

漏洞标题 CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting 漏洞描述 WordPress WPQA plugin prior to 5.4 contains a reflected cross-site scripting vulnerability. It does n...

漏洞标题 CVE-2017-9506: Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request Forgery 漏洞描述 The Atlassian Jira IconUriServlet of the OAuth Plugin from version...

漏洞标题 CVE-2021-41192: Redash Setup Configuration - Default Secrets Disclosure 漏洞描述 Redash Setup Configuration is vulnerable to default secrets disclosure (Insecure Default I...

漏洞标题 CVE-2021-27320: Doctor Appointment System 1.0 - SQL Injection 漏洞描述 Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated atta...

漏洞标题 CVE-2023-41109: SmartNode SN200 Analog Telephone Adapter (ATA) & VoIP Gateway - Command Injection 漏洞描述 The SmartNode SN200 Analog Telephone Adapter (ATA) & VoI...

漏洞标题 CVE-2022-0208: WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting 漏洞描述 WordPress Plugin MapPress before version 2.73.4 does not sanitize and escape the '...

漏洞报告 【Gitlab 16000刀】Stored XSS in markdown via the DesignReferenceFilter http://hackerone.com/reports/1212067 【Gitlab 3000刀】Stored XSS in Mermaid when viewing Markdown fi...

之前看了挺多大佬写相关的文章，奈何我没太理解，所以想着自己搭建一个试试理解下。 搞完之后发现其实也就是一个nginx反向代理+配置文件改动下的事情。不知道搞得对不对，希望XD们看了指正下。 ...

漏洞标题 CVE-2016-8527: Aruba Airwave <8.2.3.1 - Cross-Site Scripting 漏洞描述 Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting. PoC代码

漏洞报告 【Reddit】用户名密码暴力破解 http://hackerone.com/reports/1165225 【Reddit】密码重置没有速率限制会导致电子邮件枚举 http://hackerone.com/reports/1425884 【Proctorio】通用跨...

漏洞标题 CVE-2021-25055: WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting 漏洞描述 The plugin is affected by a cross-site scripting vulnerability within ...

漏洞标题 CVE-2022-2383: WordPress Feed Them Social <3.0.1 - Cross-Site Scripting 漏洞描述 WordPress Feed Them Social plugin before 3.0.1 contains a reflected cross-site scriptin...