漏洞标题 CVE-2024-4577: PHP CGI - Argument Injection 漏洞描述 PHP CGI - Argument Injection (CVE-2024-4577) is a critical argument injection flaw in PHP. PoC代码

漏洞标题 CVE-2024-11728: KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection 漏洞描述 The KiviCare Clinic & Patient Management System (EHR) plugin...

漏洞标题 (CVE-2024-22120) Zabbix服务器 命令注入漏洞 漏洞描述 (CVE-2024-22120) Zabbix服务器 命令注入漏洞 PoC代码 暂无

漏洞标题 CVE-2024-39646: WordPress Custom 404 Pro <= 3.11.1 - Reflected XSS 漏洞描述 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripti...

漏洞标题 CVE-2024-5765: WpStickyBar <= 2.1.0 - SQL Injection 漏洞描述 The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX...

漏洞标题 CVE-2024-1512: MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection 漏洞描述 The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordP...

漏洞标题 CVE-2024-12987: DrayTek Vigor - Command Injection 漏洞描述 DrayTek Gateway devices (Vigor2960, Vigor300B, etc.) are vulnerable to command injection via the session paramet...

漏洞标题 CVE-2024-1728: Gradio > 4.19.1 UploadButton - Path Traversal 漏洞描述 gradio-app/gradio is vulnerable to a local file inclusion vulnerability due to improper validation...

漏洞标题 CVE-2024-30569: Netgear R6850 - Information Disclosure 漏洞描述 Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the curren...

漏洞标题 CVE-2024-0305: Ncast busiFacade - Remote Command Execution 漏洞描述 The Ncast Yingshi high-definition intelligent recording and playback system is a newly developed audio ...

漏洞标题 CVE-2024-5084: Hash Form <= 1.1.0 - Arbitrary File Upload 漏洞描述 The Hash Form Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploa...

漏洞标题 CVE-2024-3274: D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure 漏洞描述 A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 202...

漏洞标题 CVE-2024-11587: idcCMS V1.60 - Cross-Site Scripting 漏洞描述 idcCMS V1.60 is vulnerable to reflected cross-site scripting (XSS) via the idName parameter in read.php. Unsan...

漏洞标题 CVE-2024-44849: Qualitor <= 8.24 - Remote Code Execution 漏洞描述 Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAce...

漏洞标题 CVE-2024-51228: TOTOLINK CX-A3002RU - Remote Code Execution 漏洞描述 An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and...

漏洞标题 CVE-2024-35627: TileServer API - Cross Site Scripting 漏洞描述 tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the com...