CVE-2022 第116页
CVE-2022-2486: Wavlink WN535K2/WN535K3 - OS Command Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2486: Wavlink WN535K2/WN535K3 – OS Command Injection

漏洞标题 CVE-2022-2486: Wavlink WN535K2/WN535K3 - OS Command Injection 漏洞描述 Wavlink WN535K2 and WN535K3 routers are susceptible to OS command injection in an unknown part of th...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年12月26日 04:59
30
CVE-2022-2756: Kavita <0.5.4.1 - Server-Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2756: Kavita <0.5.4.1 - Server-Side Request Forgery

漏洞标题 CVE-2022-2756: Kavita <0.5.4.1 - Server-Side Request Forgery 漏洞描述 Kavita before 0.5.4.1 is susceptible to server-side request forgery in GitHub repository kareadita...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年1月10日 22:08
30
CVE-2022-47986: IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2022-47986: IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution

漏洞标题 CVE-2022-47986: IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution 漏洞描述 IBM Aspera Faspex through 4.4.2 Patch Level 1 is susceptible to remote code execution via...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年12月6日 00:41
30
CVE-2022-34753: SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34753: SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution

漏洞标题 CVE-2022-34753: SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution 漏洞描述 SpaceLogic C-Bus Home Controller through 1.31.460 is susceptible to remo...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月31日 20:29
40
CVE-2022-34047: WAVLINK WN530HG4 - Improper Access Control-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34047: WAVLINK WN530HG4 – Improper Access Control

漏洞标题 CVE-2022-34047: WAVLINK WN530HG4 - Improper Access Control 漏洞描述 WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. An attacker can obtain ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年4月3日 04:28
20
CVE-2022-1020: WordPress WooCommerce <3.1.2 - Arbitrary Function Call-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1020: WordPress WooCommerce <3.1.2 - Arbitrary Function Call

漏洞标题 CVE-2022-1020: WordPress WooCommerce <3.1.2 - Arbitrary Function Call 漏洞描述 WordPress WooCommerce plugin before 3.1.2 does not have authorisation and CSRF checks in ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年4月5日 10:37
10
CVE-2022-3982: WordPress Booking Calendar <3.2.2 - Arbitrary File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2022-3982: WordPress Booking Calendar <3.2.2 - Arbitrary File Upload

漏洞标题 CVE-2022-3982: WordPress Booking Calendar <3.2.2 - Arbitrary File Upload 漏洞描述 WordPress Booking Calendar plugin before 3.2.2 is susceptible to arbitrary file upload...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月25日 04:29
10
CVE-2022-40684: Fortinet FortiOS admin 远程命令执行漏洞-渗透云记 - 专注于网络安全与技术分享

CVE-2022-40684: Fortinet FortiOS admin 远程命令执行漏洞

漏洞标题 CVE-2022-40684: Fortinet FortiOS admin 远程命令执行漏洞 漏洞描述 Fortinet 周一指出,上周修补的 CVE-2022-40684 身份验证绕过安全漏洞,正在野外被广泛利用。作为管理界面上的一...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月8日 17:03
30
CVE-2022-48164: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2022-48164: Wavlink WL-WN533A8 M33A8.V5030.190716 – Information Disclosure

漏洞标题 CVE-2022-48164: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure 漏洞描述 An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月10日 11:48
10
CVE-2022-34094: Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34094: Software Publico Brasileiro i3geo v7.0.5 – Cross-Site Scripting

漏洞标题 CVE-2022-34094: Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting 漏洞描述 Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cro...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年4月1日 14:49
20
CVE-2022-2461: Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2461: Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change

漏洞标题 CVE-2022-2461: Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change 漏洞描述 The Transposh WordPress Translation plugin for WordPress is vulnerabl...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年12月3日 04:31
00
CVE-2022-0208: WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0208: WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting

漏洞标题 CVE-2022-0208: WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting 漏洞描述 WordPress Plugin MapPress before version 2.73.4 does not sanitize and escape the '...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年7月28日 04:13
30
CVE-2022-0346: WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0346: WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution

漏洞标题 CVE-2022-0346: WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution 漏洞描述 WordPress XML Sitemap Generator for Google plugin...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年1月4日 01:49
00
CVE-2022-1168: WordPress WP JobSearch <1.5.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1168: WordPress WP JobSearch <1.5.1 - Cross-Site Scripting

漏洞标题 CVE-2022-1168: WordPress WP JobSearch <1.5.1 - Cross-Site Scripting 漏洞描述 WordPress WP JobSearch plugin prior to 1.5.1 contains a cross-site scripting vulnerability....
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年11月24日 15:42
10
CVE-2022-2544: WordPress Ninja Job Board < 1.3.3 - Direct Request-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2544: WordPress Ninja Job Board < 1.3.3 - Direct Request

漏洞标题 CVE-2022-2544: WordPress Ninja Job Board < 1.3.3 - Direct Request 漏洞描述 WordPress Ninja Job Board plugin prior to 1.3.3 is susceptible to a direct request vulnerabil...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年7月15日 21:39
30
CVE-2022-45805: WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-45805: WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection

漏洞标题 CVE-2022-45805: WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection 漏洞描述 WordPress Paytm Payment Gateway plugin through 2.7.3 contains a SQL injection vulnerabi...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年2月24日 06:48
00