漏洞标题 Adobe ColdFusion CVE-2024-20767 任意文件读取漏洞 漏洞描述 Adobe ColdFusion中存在任意文件读取漏洞，此漏洞是由于未充分验证用户输入file_name参数的数据所导致的。 PoC代码 暂无

漏洞标题 Cleo文件传输软件 /Synchronization 命令执行漏洞（CVE-2024-55956） 漏洞描述 Cleo是一家提供企业级数据传输和集成解决方案的公司，其产品被广泛应用于供应链、财务和客户关系等领域...

漏洞标题 CVE-2024-39713: Rocket.Chat - Server-Side Request Forgery (SSRF) 漏洞描述 A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before ve...

漏洞标题 CVE-2024-41667: OpenAM<=15.0.3 FreeMarker - Template Injection 漏洞描述 OpenAM is an open access management solution. In versions 15.0.3 and prior, the `getCustomLoginU...

漏洞标题 CVE-2024-8852: All-in-One WP Migration < 7.87 - Unauthenticated Information Disclosure 漏洞描述 The All-in-One WP Migration and Backup plugin for WordPress is vulnerabl...

漏洞标题 CVE-2024-28995: SolarWinds Serv-U - Directory Traversal 漏洞描述 SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read...

漏洞标题 CData Sync CVE-2024-31851 路径遍历漏洞 漏洞描述 CData sync存在路径遍历漏洞，此漏洞是由于/ui/接口对用户的请求验证不当造成的。 PoC代码 暂无

漏洞标题 CVE-2024-36401: GeoServer RCE in Evaluating Property Name Expressions 漏洞描述 In the GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer, multiple OGC reque...

漏洞标题 CVE-2024-6555: WP Popups - Information Disclosure 漏洞描述 WP Popups - WordPress Popup builder plugin for WordPress contains a full path disclosure caused by using mobiled...

漏洞标题 CVE-2024-6460: WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusion 漏洞描述 The Grow by Tradedoubler WordPress plugin through version ...

漏洞标题 CVE-2024-0204: Fortra GoAnywhere MFT - Authentication Bypass 漏洞描述 Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to c...

漏洞标题 CVE-2024-12209: WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion 漏洞描述 The WP Umbrella: Update Backup Restore & Monitoring plu...

漏洞标题 CVE-2024-8425: WooCommerce Ultimate Gift Card ≤ 2.6.0 - Arbitrary File Upload 漏洞描述 The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary ...

漏洞标题 CVE-2024-9989: Crypto <= 2.15 - Authentication Bypass 漏洞描述 The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, ...

漏洞标题 CVE-2024-8673: Z-Downloads < 1.11.7 - Cross-Site Scripting 漏洞描述 The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing m...

漏洞标题 CVE-2024-57514: TP-Link Archer A20 v3 Router - Cross-site Scripting 漏洞描述 The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper h...