CVE-2025 第11页
CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2025-61757: Oracle Identity Manager REST WebServices – Authentication Bypass

漏洞标题 CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass 漏洞描述 Vulnerability in the Identity Manager product of Oracle Fusion Middleware (compon...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年5月22日 22:37
60
CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload

漏洞标题 CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload 漏洞描述 The Migration, Backup, Staging – WPvivid Backu...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年5月7日 00:31
60
CVE-2025-26319: FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2025-26319: FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload

漏洞标题 CVE-2025-26319: FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload 漏洞描述 FlowiseAI Flowise version 2.2.6 and below contains an arbitrary file upload vulnerability in...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年9月21日 07:21
60
CVE-2025-53833: LaRecipe < 2.8.1 Remote Code Execution via SSTI-渗透云记 - 专注于网络安全与技术分享

CVE-2025-53833: LaRecipe < 2.8.1 Remote Code Execution via SSTI

漏洞标题 CVE-2025-53833: LaRecipe < 2.8.1 Remote Code Execution via SSTI 漏洞描述 LaRecipe is an application that allows users to create documentation with Markdown inside a Lar...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年8月25日 11:30
60
CVE-2025-34045: WeiPHP 5.0 - Path Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2025-34045: WeiPHP 5.0 – Path Traversal

漏洞标题 CVE-2025-34045: WeiPHP 5.0 - Path Traversal 漏洞描述 WeiPHP 5.0 contains a path traversal caused by insufficient input validation of the picUrl parameter in /public/index....
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年7月22日 04:17
60
(CVE-2025-27817) Apache Kafka Client任意文件读取和SSRF漏洞-渗透云记 - 专注于网络安全与技术分享

(CVE-2025-27817) Apache Kafka Client任意文件读取和SSRF漏洞

漏洞标题 (CVE-2025-27817) Apache Kafka Client任意文件读取和SSRF漏洞 漏洞描述 (CVE-2025-27817) Apache Kafka Client任意文件读取和SSRF漏洞 PoC代码 暂无
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年8月14日 04:42
60
CVE-2025-2711: Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2025-2711: Yonyou UFIDA ERP-NC V5.0 – Cross-Site Scripting

漏洞标题 CVE-2025-2711: Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting 漏洞描述 Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting (XSS) via the langcode par...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年9月19日 05:33
60
CVE-2025-11371: Gladinet CentreStack & TrioFox - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2025-11371: Gladinet CentreStack & TrioFox – Local File Inclusion

漏洞标题 CVE-2025-11371: Gladinet CentreStack & TrioFox - Local File Inclusion 漏洞描述 In the default installation and configuration of Gladinet CentreStack and TrioFox, there...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年8月26日 06:08
60
CVE-2025-30567: WordPress WP01 - Path Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2025-30567: WordPress WP01 – Path Traversal

漏洞标题 CVE-2025-30567: WordPress WP01 - Path Traversal 漏洞描述 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wp01ru W...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年8月18日 09:10
60
CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload

漏洞标题 CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload 漏洞描述 The Migration, Backup, Staging – WPvivid Backu...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年5月29日 08:47
60
CVE-2025-53118: Securden Unified PAM - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2025-53118: Securden Unified PAM – Authentication Bypass

漏洞标题 CVE-2025-53118: Securden Unified PAM - Authentication Bypass 漏洞描述 An authentication bypass vulnerability exists which allows an unauthenticated attacker to control adm...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年9月19日 06:26
60
CVE-2025-51586: PrestaShop - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-51586: PrestaShop – Information Disclosure

漏洞标题 CVE-2025-51586: PrestaShop - Information Disclosure 漏洞描述 User enumeration vulnerability in the AdminLogin controller in PrestaShop 1.7 through 8.2.2 allows remote atta...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年1月1日 07:41
60
CVE-2025-64525: Astro - Broken Access Control-渗透云记 - 专注于网络安全与技术分享

CVE-2025-64525: Astro – Broken Access Control

漏洞标题 CVE-2025-64525: Astro - Broken Access Control 漏洞描述 Astro 2.16.0 to 5.15.5 contains a broken access control caused by insecure use of unsanitized x-forwarded-proto and ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年11月30日 11:54
60
CVE-2025-55169: WeGIA - Directory Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2025-55169: WeGIA – Directory Traversal

漏洞标题 CVE-2025-55169: WeGIA - Directory Traversal 漏洞描述 WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to vers...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年6月13日 17:01
60
CVE-2025-2777: SysAid On-Prem <= 23.3.40 - XML External Entity-渗透云记 - 专注于网络安全与技术分享

CVE-2025-2777: SysAid On-Prem <= 23.3.40 - XML External Entity

漏洞标题 CVE-2025-2777: SysAid On-Prem <= 23.3.40 - XML External Entity 漏洞描述 SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年1月20日 14:37
60
CVE-2025-34045: WeiPHP 5.0 - Path Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2025-34045: WeiPHP 5.0 – Path Traversal

漏洞标题 CVE-2025-34045: WeiPHP 5.0 - Path Traversal 漏洞描述 WeiPHP 5.0 contains a path traversal caused by insufficient input validation of the picUrl parameter in /public/index....
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年11月13日 05:46
60