CVE-2021 第40页
CVE-2021-44139: Alibaba Sentinel - Server-side request forgery (SSRF)-渗透云记 - 专注于网络安全与技术分享

CVE-2021-44139: Alibaba Sentinel – Server-side request forgery (SSRF)

漏洞标题 CVE-2021-44139: Alibaba Sentinel - Server-side request forgery (SSRF) 漏洞描述 There is a Pre-Auth SSRF vulnerability in Alibaba Sentinel version 1.8.2, which allows remot...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年6月17日 04:16
50
CVE-2021-25120: Easy Social Feed < 6.2.7 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-25120: Easy Social Feed < 6.2.7 - Cross-Site Scripting

漏洞标题 CVE-2021-25120: Easy Social Feed < 6.2.7 - Cross-Site Scripting 漏洞描述 Easy Social Feed < 6.2.7 is susceptible to reflected cross-site scripting because the plugin...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年9月8日 12:57
50
CVE-2021-3019: ffay lanproxy Directory Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2021-3019: ffay lanproxy Directory Traversal

漏洞标题 CVE-2021-3019: ffay lanproxy Directory Traversal 漏洞描述 ffay lanproxy 0.1 is susceptible to a directory traversal vulnerability that could let attackers read /../conf/co...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年5月18日 17:00
50
CVE-2021-25299: Nagios XI 5.7.5 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-25299: Nagios XI 5.7.5 – Cross-Site Scripting

漏洞标题 CVE-2021-25299: Nagios XI 5.7.5 - Cross-Site Scripting 漏洞描述 Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/ss...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年3月14日 22:14
50
CVE-2021-37704: phpfastcache - phpinfo Resource Exposure-渗透云记 - 专注于网络安全与技术分享

CVE-2021-37704: phpfastcache – phpinfo Resource Exposure

漏洞标题 CVE-2021-37704: phpfastcache - phpinfo Resource Exposure 漏洞描述 phpinfo() is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/php...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年11月3日 08:55
50
CVE-2021-41878: i-Panel Administration System 2.0 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-41878: i-Panel Administration System 2.0 – Cross-Site Scripting

漏洞标题 CVE-2021-41878: i-Panel Administration System 2.0 - Cross-Site Scripting 漏洞描述 i-Panel Administration System 2.0 contains a cross-site scripting vulnerability that enab...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年2月20日 11:50
50
CVE-2021-24175: The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24175: The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

漏洞标题 CVE-2021-24175: The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass 漏洞描述 The Plus Addons for Elementor plugin (before version 4.1.7) allowed ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年3月11日 15:19
50
CVE-2021-25085: WOOF WordPress plugin - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-25085: WOOF WordPress plugin – Cross-Site Scripting

漏洞标题 CVE-2021-25085: WOOF WordPress plugin - Cross-Site Scripting 漏洞描述 The WOOF WordPress plugin does not sanitize or escape the woof_redraw_elements parameter before refle...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年8月24日 15:06
50
CVE-2021-39350: FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-39350: FV Flowplayer Video Player WordPress plugin – Authenticated Cross-Site Scripting

漏洞标题 CVE-2021-39350: FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting 漏洞描述 The FV Flowplayer Video Player WordPress plugin is vulnerable to ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年4月21日 02:47
50
CVE-2021-24169: WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24169: WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting

漏洞标题 CVE-2021-24169: WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting 漏洞描述 WordPress Advanced Order Export For WooCommerce plu...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年2月24日 21:49
50
CVE-2021-3374: Rstudio Shiny Server <1.5.16 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2021-3374: Rstudio Shiny Server <1.5.16 - Local File Inclusion

漏洞标题 CVE-2021-3374: Rstudio Shiny Server <1.5.16 - Local File Inclusion 漏洞描述 Rstudio Shiny Server prior to 1.5.16 is vulnerable to local file inclusion and source code l...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年5月26日 07:03
50
CVE-2021-24145: WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24145: WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload

漏洞标题 CVE-2021-24145: WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload 漏洞描述 WordPress Modern Events Calendar Lite plugin before 5.16.5 ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年2月19日 17:32
40
CVE-2021-24146: WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24146: WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure

漏洞标题 CVE-2021-24146: WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure 漏洞描述 WordPress Modern Events Calendar Lite before 5.16.5 does not p...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年2月22日 08:15
40
CVE-2021-24165: WordPress Ninja Forms <3.4.34 - Open Redirect-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24165: WordPress Ninja Forms <3.4.34 - Open Redirect

漏洞标题 CVE-2021-24165: WordPress Ninja Forms <3.4.34 - Open Redirect 漏洞描述 WordPress Ninja Forms plugin before 3.4.34 contains an open redirect vulnerability via the wp_aja...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年11月15日 20:31
40
CVE-2021-24215: Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24215: Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation

漏洞标题 CVE-2021-24215: Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation 漏洞描述 An Improper Access Control vulnerability...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年8月9日 14:15
40
CVE-2021-24245: WordPress Stop Spammers <2021.9 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24245: WordPress Stop Spammers <2021.9 - Cross-Site Scripting

漏洞标题 CVE-2021-24245: WordPress Stop Spammers <2021.9 - Cross-Site Scripting 漏洞描述 WordPress Stop Spammers plugin before 2021.9 contains a reflected cross-site scripting v...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年3月12日 17:42
40