CVE-2022 第74页
CVE-2022-34576: WAVLINK WN535 G3 - Improper Access Control-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34576: WAVLINK WN535 G3 – Improper Access Control

漏洞标题 CVE-2022-34576: WAVLINK WN535 G3 - Improper Access Control 漏洞描述 WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to improper access control. A vulnerability in /cgi...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年9月24日 00:01
30
CVE-2022-28032: Atom CMS v2.0 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-28032: Atom CMS v2.0 – SQL Injection

漏洞标题 CVE-2022-28032: Atom CMS v2.0 - SQL Injection 漏洞描述 AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php PoC代码
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月4日 19:17
40
CVE-2022-0653: Wordpress Profile Builder Plugin Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0653: WordPress Profile Builder Plugin Cross-Site Scripting

漏洞标题 CVE-2022-0653: Wordpress Profile Builder Plugin Cross-Site Scripting 漏洞描述 The Profile Builder User Profile & User Registration Forms WordPress plugin is vulnerable...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年9月20日 11:39
10
CVE-2022-1724: WordPress Simple Membership <4.1.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1724: WordPress Simple Membership <4.1.1 - Cross-Site Scripting

漏洞标题 CVE-2022-1724: WordPress Simple Membership <4.1.1 - Cross-Site Scripting 漏洞描述 WordPress Simple Membership plugin before 4.1.1 contains a reflected cross-site script...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年6月20日 02:55
60
CVE-2022-3484: WordPress WPB Show Core - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-3484: WordPress WPB Show Core – Cross-Site Scripting

漏洞标题 CVE-2022-3484: WordPress WPB Show Core - Cross-Site Scripting 漏洞描述 WordPress wpb-show-core plugin through TODO contains a cross-site scripting vulnerability. The plugi...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年2月3日 07:21
40
CVE-2022-3982: WordPress Booking Calendar <3.2.2 - Arbitrary File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2022-3982: WordPress Booking Calendar <3.2.2 - Arbitrary File Upload

漏洞标题 CVE-2022-3982: WordPress Booking Calendar <3.2.2 - Arbitrary File Upload 漏洞描述 WordPress Booking Calendar plugin before 3.2.2 is susceptible to arbitrary file upload...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年9月12日 18:46
20
CVE-2022-0595: WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0595: WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting

漏洞标题 CVE-2022-0595: WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting 漏洞描述 WordPress Contact Form 7 before 1.3.6.3 contains an unauthenticated stored cross...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年4月13日 22:39
10
CVE-2022-1595: WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1595: WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure

漏洞标题 CVE-2022-1595: WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure 漏洞描述 The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret log...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年7月24日 07:23
40
CVE-2022-29455-headless: WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-29455-headless: WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting

漏洞标题 CVE-2022-29455-headless: WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting 漏洞描述 WordPress Elementor Website Builder plugin 3.5.5 and prior con...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年7月1日 15:42
20
CVE-2022-1390: WordPress Admin Word Count Column 2.2 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1390: WordPress Admin Word Count Column 2.2 – Local File Inclusion

漏洞标题 CVE-2022-1390: WordPress Admin Word Count Column 2.2 - Local File Inclusion 漏洞描述 The plugin does not validate the path parameter given to readfile(), which could allow...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年7月24日 04:26
10
CVE-2022-0599: WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0599: WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting

漏洞标题 CVE-2022-0599: WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting 漏洞描述 WordPress Mapping Multiple URLs Redirect Same Page plugin 5.8 an...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年9月21日 22:04
30
CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting

漏洞标题 CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting 漏洞描述 WordPress WPQA plugin prior to 5.4 contains a reflected cross-site scripting vulnerability. It does n...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年8月7日 07:45
00
CVE-2022-33901: WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read-渗透云记 - 专注于网络安全与技术分享

CVE-2022-33901: WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read

漏洞标题 CVE-2022-33901: WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read 漏洞描述 WordPress MultiSafepay for WooCommerce plugin through 4.13.1 contains an ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年1月1日 17:57
10
CVE-2022-1950: Wordpress Youzify sql injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1950: WordPress Youzify sql injection

漏洞标题 CVE-2022-1950: Wordpress Youzify sql injection 漏洞描述 The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL stateme...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年6月17日 22:53
10
CVE-2022-0220: WordPress GDPR & CCPA <1.9.27 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0220: WordPress GDPR & CCPA <1.9.27 - Cross-Site Scripting

漏洞标题 CVE-2022-0220: WordPress GDPR & CCPA <1.9.27 - Cross-Site Scripting 漏洞描述 WordPress GDPR & CCPA plugin before 1.9.27 contains a cross-site scripting vulnerab...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年12月14日 07:17
10
CVE-2022-1020: WordPress WooCommerce <3.1.2 - Arbitrary Function Call-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1020: WordPress WooCommerce <3.1.2 - Arbitrary Function Call

漏洞标题 CVE-2022-1020: WordPress WooCommerce <3.1.2 - Arbitrary Function Call 漏洞描述 WordPress WooCommerce plugin before 3.1.2 does not have authorisation and CSRF checks in ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月6日 03:09
40