CVE-2023 第44页
CVE-2023-6380: OpenCms 14 & 15 - Open Redirect-渗透云记 - 专注于网络安全与技术分享

CVE-2023-6380: OpenCms 14 & 15 – Open Redirect

漏洞标题 CVE-2023-6380: OpenCms 14 & 15 - Open Redirect 漏洞描述 Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Me...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年5月9日 23:08
20
CVE-2023-34751: bloofoxCMS v0.5.2.1 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-34751: bloofoxCMS v0.5.2.1 – SQL Injection

漏洞标题 CVE-2023-34751: bloofoxCMS v0.5.2.1 - SQL Injection 漏洞描述 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index....
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年11月26日 01:30
30
CVE-2023-34752: bloofoxCMS v0.5.2.1 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-34752: bloofoxCMS v0.5.2.1 – SQL Injection

漏洞标题 CVE-2023-34752: bloofoxCMS v0.5.2.1 - SQL Injection 漏洞描述 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index....
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年1月8日 05:17
70
CVE-2023-34755: bloofoxCMS v0.5.2.1 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-34755: bloofoxCMS v0.5.2.1 – SQL Injection

漏洞标题 CVE-2023-34755: bloofoxCMS v0.5.2.1 - SQL Injection 漏洞描述 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/ind...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年3月15日 12:16
30
CVE-2023-51713: ProFTPD < 1.3.8a - DoS via Out-of-Bounds Read-渗透云记 - 专注于网络安全与技术分享

CVE-2023-51713: ProFTPD < 1.3.8a - DoS via Out-of-Bounds Read

漏洞标题 CVE-2023-51713: ProFTPD < 1.3.8a - DoS via Out-of-Bounds Read 漏洞描述 ProFTPD versions before 1.3.8a contain a one-byte out-of-bounds read vulnerability in the make_ft...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年10月5日 15:07
30
CVE-2023-37679: NextGen Mirth Connect - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-37679: NextGen Mirth Connect – Remote Code Execution

漏洞标题 CVE-2023-37679: NextGen Mirth Connect - Remote Code Execution 漏洞描述 Mirth Connect, by NextGen HealthCare, is an open source data integration platform widely used by hea...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年3月19日 18:47
30
CVE-2023-43208: NextGen Healthcare Mirth Connect - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-43208: NextGen Healthcare Mirth Connect – Remote Code Execution

漏洞标题 CVE-2023-43208: NextGen Healthcare Mirth Connect - Remote Code Execution 漏洞描述 Unauthenticated remote code execution vulnerability in NextGen Healthcare Mirth Connect b...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月3日 18:32
40
CVE-2023-22480: KubeOperator Foreground `kubeconfig` - File Download-渗透云记 - 专注于网络安全与技术分享

CVE-2023-22480: KubeOperator Foreground `kubeconfig` – File Download

漏洞标题 CVE-2023-22480: KubeOperator Foreground `kubeconfig` - File Download 漏洞描述 KubeOperator is an open source Kubernetes distribution focused on helping enterprises plan, d...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年2月19日 05:02
20
CVE-2023-2648: Weaver E-Office 9.5 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-2648: Weaver E-Office 9.5 – Remote Code Execution

漏洞标题 CVE-2023-2648: Weaver E-Office 9.5 - Remote Code Execution 漏洞描述 A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an u...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年4月2日 16:58
40
CVE-2023-6421: WordPress Download Manager - File Password Exposure-渗透云记 - 专注于网络安全与技术分享

CVE-2023-6421: WordPress Download Manager – File Password Exposure

漏洞标题 CVE-2023-6421: WordPress Download Manager - File Password Exposure 漏洞描述 The WordPress Download Manager plugin contains a vulnerability that allows attackers to obtain ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月22日 21:20
20
CVE-2023-0669: Fortra GoAnywhere MFT - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-0669: Fortra GoAnywhere MFT – Remote Code Execution

漏洞标题 CVE-2023-0669: Fortra GoAnywhere MFT - Remote Code Execution 漏洞描述 Fortra GoAnywhere MFT is susceptible to remote code execution via unsafe deserialization of an arbitr...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年2月20日 08:23
20
CVE-2023-48728: WWBN AVideo 11.6 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-48728: WWBN AVideo 11.6 – Cross-Site Scripting

漏洞标题 CVE-2023-48728: WWBN AVideo 11.6 - Cross-Site Scripting 漏洞描述 A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年10月31日 19:58
50
CVE-2023-2648: Weaver E-Office 9.5 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-2648: Weaver E-Office 9.5 – Remote Code Execution

漏洞标题 CVE-2023-2648: Weaver E-Office 9.5 - Remote Code Execution 漏洞描述 A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an u...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年4月15日 12:04
60
CVE-2023-42343: OpenCMS - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-42343: OpenCMS – Cross-Site Scripting

漏洞标题 CVE-2023-42343: OpenCMS - Cross-Site Scripting 漏洞描述 OpenCMS below 10.5.1 is vulnerable to Cross-Site Scripting vulnerability. PoC代码
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年3月23日 13:56
20
CVE-2023-42344: OpenCMS - XML external entity (XXE)-渗透云记 - 专注于网络安全与技术分享

CVE-2023-42344: OpenCMS – XML external entity (XXE)

漏洞标题 CVE-2023-42344: OpenCMS - XML external entity (XXE) 漏洞描述 users can execute code without authentication. An attacker can execute malicious requests on the OpenCms serve...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年4月25日 17:54
40
CVE-2023-6379: OpenCMS 14 & 15 - Cross Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-6379: OpenCMS 14 & 15 – Cross Site Scripting

漏洞标题 CVE-2023-6379: OpenCMS 14 & 15 - Cross Site Scripting 漏洞描述 Cross-site scripting (XSS) vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of t...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年3月13日 04:54
30