漏洞标题 Atlassian Confluence Data Center and Server CVE-2024-21683 远程代码执行漏洞 漏洞描述 Atlassian Confluence Data Center and Server存在远程代码执行漏洞，此漏洞是程序对用户输...

漏洞标题 CVE-2024-0799: Arcserve Unified Data Protection - Authentication Bypass 漏洞描述 An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and ...

漏洞标题 CVE-2024-57049: TP-Link Archer C20 - Authentication Bypass 漏洞描述 A vulnerability in the TP-Link Archer C20 router with firmware version V6.6_230412 and earlier permits ...

漏洞标题 CVE-2024-2879: WordPress Plugin LayerSlider 7.9.11-7.10.0 - SQL Injection 漏洞描述 The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup...

漏洞标题 CVE-2024-8963: Ivanti Cloud Services Appliance - Path Traversal 漏洞描述 Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to ...

漏洞标题 CVE-2024-1209: LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments 漏洞描述 The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Inform...

漏洞标题 Apache OFBiz CVE-2024-36104 鉴权绕过漏洞 漏洞描述 Apache OFBiz 存在鉴权绕过漏洞，此漏洞是由于ProgramExport未充分验证用户输入的数据所导致的。 PoC代码 暂无

漏洞标题 CVE-2024-29882: HTTP API DOM - XSS on JSONP callback 漏洞描述 SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/vid-<id>?callback=...

漏洞标题 Apache OFBiz /viewdatafile 代码执行漏洞（CVE-2024-45195） 漏洞描述 Apache OFBiz是一个开源企业资源规划（ERP）系统。它提供了一套企业应用程序，集成并自动化企业的许多业务流程...

漏洞标题 CVE-2024-55218: IceWarp Server 10.2.1 - Cross-Site Scripting 漏洞描述 IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter. PoC代码

漏洞标题 CVE-2024-6845: SmartSearchWP < 2.4.6 - OpenAI Key Disclosure 漏洞描述 The plugin does not have proper authorization in one of its REST endpoint, allowing unauthenticate...

漏洞标题 CVE-2024-9707: Hunk Companion <= 1.8.4 - Arbitrary Plugin Installation 漏洞描述 The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installatio...

漏洞标题 CVE-2024-28253: OpenMetaData - SpEL Injection in PUT /api/v1/policies 漏洞描述 OpenMetadata is a unified platform for discovery, observability, and governance powered by a...

漏洞标题 北京百卓多业务安全网关智能管理平台 CVE-2024-0939 任意文件上传漏洞 漏洞描述 北京百卓多业务安全网关智能管理平台中存在任意文件上传漏洞，此漏洞是由于uploadfile.php未充分验证用...

漏洞标题 CVE-2024-4295: Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash 漏洞描述 Email Subscribers by Icegram Express <= 5.7.20 contai...

漏洞标题 CVE-2024-11238: Landray EKP - Path Traversal 漏洞描述 A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function del...