CVE-2023 第28页
CVE-2023-27638: tshirtecommerce PrestaShop Module - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-27638: tshirtecommerce PrestaShop Module – SQL Injection

漏洞标题 CVE-2023-27638: tshirtecommerce PrestaShop Module - SQL Injection 漏洞描述 The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via the...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年8月20日 11:55
50
CVE-2023-37999: HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation-渗透云记 - 专注于网络安全与技术分享

CVE-2023-37999: HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation

漏洞标题 CVE-2023-37999: HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation 漏洞描述 The HT Mega plugin for WordPress is vulnerabl...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月9日 02:32
50
CraftCMS /ConditionsController.php 代码执行漏洞(CVE-2023-41892)-渗透云记 - 专注于网络安全与技术分享

CraftCMS /ConditionsController.php 代码执行漏洞(CVE-2023-41892)

漏洞标题 CraftCMS /ConditionsController.php 代码执行漏洞(CVE-2023-41892) 漏洞描述 Craft CMS是一个开源的内容管理系统,它专注于用户友好的内容创建过程,逻辑清晰明了,是一个高度自由...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年7月25日 16:18
50
CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass

漏洞标题 CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass 漏洞描述 The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年9月5日 08:40
50
CVE-2023-22518: Atlassian Confluence Server - Improper Authorization-渗透云记 - 专注于网络安全与技术分享

CVE-2023-22518: Atlassian Confluence Server – Improper Authorization

漏洞标题 CVE-2023-22518: Atlassian Confluence Server - Improper Authorization 漏洞描述 All versions of Confluence Data Center and Server are affected by this unexploited vulnerabil...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年4月9日 14:28
50
CVE-2023-24737: PMB v7.4.6 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-24737: PMB v7.4.6 – Cross-Site Scripting

漏洞标题 CVE-2023-24737: PMB v7.4.6 - Cross-Site Scripting 漏洞描述 PMB v7.4.6 allows an attacker to perform a reflected XSS on export_z3950.php via the 'query' parameter...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年8月27日 06:35
50
CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass

漏洞标题 CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass 漏洞描述 The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年12月9日 16:20
50
CVE-2023-30192: PrestaShop 'possearchproducts' <= 1.7 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-30192: PrestaShop ‘possearchproducts’ <= 1.7 - SQL Injection

漏洞标题 CVE-2023-30192: PrestaShop 'possearchproducts' <= 1.7 - SQL Injection 漏洞描述 In the module “Search Products” (possearchproducts) from PosThemes for Presta...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年8月10日 01:22
50
CVE-2023-45375: PrestaShop PireosPay - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-45375: PrestaShop PireosPay – SQL Injection

漏洞标题 CVE-2023-45375: PrestaShop PireosPay - SQL Injection 漏洞描述 In the module “PireosPay” (pireospay) up to version 1.7.9 from 01generator.com for PrestaShop, a guest can ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年10月10日 17:34
50
CVE-2023-46574: TOTOLINK A3700R - Command Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-46574: TOTOLINK A3700R – Command Injection

漏洞标题 CVE-2023-46574: TOTOLINK A3700R - Command Injection 漏洞描述 An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年10月25日 14:25
50
CVE-2023-4111: PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-4111: PHPJabbers Bus Reservation System 1.1 – Cross-Site Scripting

漏洞标题 CVE-2023-4111: PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting 漏洞描述 A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年1月31日 10:26
50
CVE-2023-20864: VMware Aria Operations for Logs - Unauthenticated Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-20864: VMware Aria Operations for Logs – Unauthenticated Remote Code Execution

漏洞标题 CVE-2023-20864: VMware Aria Operations for Logs - Unauthenticated Remote Code Execution 漏洞描述 VMware Aria Operations for Logs contains a deserialization vulnerability. ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年1月8日 00:16
50
CVE-2023-20889: VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability-渗透云记 - 专注于网络安全与技术分享

CVE-2023-20889: VMware Aria Operations for Networks – Code Injection Information Disclosure Vulnerability

漏洞标题 CVE-2023-20889: VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability 漏洞描述 Aria Operations for Networks contains an information dis...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月9日 21:49
50
CVE-2023-23489: WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-23489: WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 – SQL Injection

漏洞标题 CVE-2023-23489: WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection 漏洞描述 WordPress Easy Digital Downloads plugin 3.1.0.2 and 3.1.0.3 contains a SQL inject...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年5月25日 20:08
50
CVE-2023-29919: SolarView Compact <= 6.00 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2023-29919: SolarView Compact <= 6.00 - Local File Inclusion

漏洞标题 CVE-2023-29919: SolarView Compact <= 6.00 - Local File Inclusion 漏洞描述 There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers c...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年2月11日 20:44
50
CVE-2023-36844: Juniper Devices - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-36844: Juniper Devices – Remote Code Execution

漏洞标题 CVE-2023-36844: Juniper Devices - Remote Code Execution 漏洞描述 Multiple cves in Juniper Network (CVE-2023-36844|CVE-2023-36845|CVE-2023-36846|CVE-2023-36847).A PHP Exter...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年3月3日 08:28
50