漏洞标题 CVE-2024-22476: Intel Neural Compressor <2.5.0 - SQL Injection 漏洞描述 Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may a...

漏洞标题 CVE-2024-45293: TablePress < 2.4.3 - XXE Injection 漏洞描述 The PHPSpreadsheet library used by the plugin is affected by an XXE as the security scanner that prevents XX...

漏洞标题 CVE-2024-54385: Radio Player <= 2.0.82 - Server-Side Request Forgery 漏洞描述 The Radio Player Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin ...

漏洞标题 Apache OFBiz CVE-2024-36104 鉴权绕过漏洞 漏洞描述 Apache OFBiz 存在鉴权绕过漏洞，此漏洞是由于ProgramExport未充分验证用户输入的数据所导致的。 PoC代码 暂无

漏洞标题 CVE-2024-9796: WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection 漏洞描述 The WordPress WP-Advanced-Search plugin for WordPress is vulnerable to SQL Injection in al...

漏洞标题 CVE-2024-22024: Ivanti Connect Secure - XXE 漏洞描述 Ivanti Connect Secure is vulnerable to XXE (XML External Entity) injection. PoC代码

漏洞标题 CVE-2024-7591: Kemp LoadMaster Load Balancer - Unauthenticated Command Injection 漏洞描述 Improper Input Validation vulnerability in Progress LoadMaster allows OS Command ...

漏洞标题 CVE-2024-24328: TotoLink Router setMacFilterRules - Command Injection 漏洞描述 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulner...

漏洞标题 CVE-2024-36412: SuiteCRM - SQL Injection 漏洞描述 SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6....

漏洞标题 CVE-2024-3080: ASUS DSL-AC88U - Authentication Bypass 漏洞描述 A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When ...

漏洞标题 CVE-2024-32870: iTop Hub Connector - Information Disclosure 漏洞描述 Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (...

漏洞标题 CVE-2024-3850: Uniview NVR301-04S2-P4 - Cross-Site Scripting 漏洞描述 Uniview NVR301-04S2-P4 contains a reflected cross-site scripting vulnerability via the PATH of LAPI. ...

漏洞标题 CVE-2024-33113: D-LINK DIR-845L bsc_sms_inbox.php file - Information Disclosure 漏洞描述 D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_s...

漏洞标题 CVE-2024-4898: WordPress InstaWP Connect <= 0.1.0.38 - Unauthenticated User Creation 漏洞描述 The InstaWP Connect – 1-click WP Staging & Migration plugin for WordP...

漏洞标题 CVE-2024-50477: WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass 漏洞描述 Stacks Mobile App Builder WordPress plugin ≤ 5.2.3 suffers from an authent...

漏洞标题 CVE-2024-4399: WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery 漏洞描述 The CAS WordPress theme through version 1.0.0 is vulnerable to Server-Side Request Fo...