CVE-2025 第28页
CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2025-61757: Oracle Identity Manager REST WebServices – Authentication Bypass

漏洞标题 CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass 漏洞描述 Vulnerability in the Identity Manager product of Oracle Fusion Middleware (compon...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年11月27日 02:38
40
CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure

漏洞标题 CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure 漏洞描述 The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPre...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年9月16日 04:10
40
CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure

漏洞标题 CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure 漏洞描述 The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPre...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年8月20日 05:07
40
CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure

漏洞标题 CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure 漏洞描述 The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPre...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年11月22日 15:36
40
CVE-2025-34291: Langflow AI <= 1.6.9 - CORS Misconfiguration-渗透云记 - 专注于网络安全与技术分享

CVE-2025-34291: Langflow AI <= 1.6.9 - CORS Misconfiguration

漏洞标题 CVE-2025-34291: Langflow AI <= 1.6.9 - CORS Misconfiguration 漏洞描述 Langflow AI versions 1.6.9 and earlier are vulnerable to a CORS misconfiguration that allows any o...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年9月25日 20:59
40
CVE-2025-3248: Langflow AI - Unauthenticated Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2025-3248: Langflow AI – Unauthenticated Remote Code Execution

漏洞标题 CVE-2025-3248: Langflow AI - Unauthenticated Remote Code Execution 漏洞描述 Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年9月10日 20:23
40
CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure

漏洞标题 CVE-2025-9196: Trinity Audio <= 5.21.0 - Information Exposure 漏洞描述 The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPre...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年5月9日 23:00
40
CVE-2025-52488: DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-52488: DNN (DotNetNuke) – Unicode Path Normalization NTLM Hash Disclosure

漏洞标题 CVE-2025-52488: DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure 漏洞描述 DNN (formerly DotNetNuke) is an open-source web content management platform (CM...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年7月16日 15:31
40
CVE-2025-52488: DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-52488: DNN (DotNetNuke) – Unicode Path Normalization NTLM Hash Disclosure

漏洞标题 CVE-2025-52488: DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure 漏洞描述 DNN (formerly DotNetNuke) is an open-source web content management platform (CM...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年1月28日 10:53
40
CVE-2025-2748: Kentico Xperience CMS - Unauthenticated Stored XSS-渗透云记 - 专注于网络安全与技术分享

CVE-2025-2748: Kentico Xperience CMS – Unauthenticated Stored XSS

漏洞标题 CVE-2025-2748: Kentico Xperience CMS - Unauthenticated Stored XSS 漏洞描述 The Kentico Xperience application does not fully validate or filter files uploaded via the multi...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年2月19日 22:29
40
CVE-2025-2746: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)-渗透云记 - 专注于网络安全与技术分享

CVE-2025-2746: Kentico Xperience 13 CMS – Staging Service Authentication Bypass (WT-2025-0011)

漏洞标题 CVE-2025-2746: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011) 漏洞描述 Before Kentico Xperience 13 Hotfix 173, this vulnerability can be e...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年5月11日 07:25
40
CVE-2025-2747: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)-渗透云记 - 专注于网络安全与技术分享

CVE-2025-2747: Kentico Xperience 13 CMS – Staging Service Authentication Bypass (WT-2025-0006)

漏洞标题 CVE-2025-2747: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006) 漏洞描述 An authentication bypass vulnerability in Kentico Xperience allows ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年5月5日 11:07
40
CVE-2025-34509: Sitecore Experience Manager (XM) and Experience Platform (XP) - Hardcoded Credentials-渗透云记 - 专注于网络安全与技术分享

CVE-2025-34509: Sitecore Experience Manager (XM) and Experience Platform (XP) – Hardcoded Credentials

漏洞标题 CVE-2025-34509: Sitecore Experience Manager (XM) and Experience Platform (XP) - Hardcoded Credentials 漏洞描述 Sitecore Experience Manager (XM) and Experience Platform (XP...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年9月17日 23:49
40
CVE-2025-5605: WSO2 Management Console - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2025-5605: WSO2 Management Console – Authentication Bypass

漏洞标题 CVE-2025-5605: WSO2 Management Console - Authentication Bypass 漏洞描述 An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年5月31日 00:24
40
LangChain 序列化注入漏洞(CVE-2025-68664)-渗透云记 - 专注于网络安全与技术分享

LangChain 序列化注入漏洞(CVE-2025-68664)

漏洞标题 LangChain 序列化注入漏洞(CVE-2025-68664) 漏洞描述 LangChain 序列化注入漏洞(CVE-2025-68664) PoC代码
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年12月9日 19:17
40
CVE-2025-0133: PAN-OS - Reflected Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2025-0133: PAN-OS – Reflected Cross-Site Scripting

漏洞标题 CVE-2025-0133: PAN-OS - Reflected Cross-Site Scripting 漏洞描述 A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年2月27日 10:48
40