CVE-2025 第54页
CVE-2025-25062: Backdrop CMS - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2025-25062: Backdrop CMS – Cross-Site Scripting

漏洞标题 CVE-2025-25062: Backdrop CMS - Cross-Site Scripting 漏洞描述 An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't suf...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年6月13日 16:47
20
CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload

漏洞标题 CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload 漏洞描述 The Migration, Backup, Staging – WPvivid Backu...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年4月22日 09:25
20
CVE-2025-44137: MapTiler Tileserver-php v2.0 - Unauthenticated File Read-渗透云记 - 专注于网络安全与技术分享

CVE-2025-44137: MapTiler Tileserver-php v2.0 – Unauthenticated File Read

漏洞标题 CVE-2025-44137: MapTiler Tileserver-php v2.0 - Unauthenticated File Read 漏洞描述 MapTiler Tileserver-php v2.0 contains a directory traversal caused by improper sanitizati...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年8月19日 09:05
30
CVE-2025-55749: XWiki - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-55749: XWiki – Information Disclosure

漏洞标题 CVE-2025-55749: XWiki - Information Disclosure 漏洞描述 XWiki 16.7.0 to 16.10.11, 17.4.4, and 17.7.0 using XJetty contains an information disclosure vulnerability caused b...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年12月4日 01:02
40
CVE-2025-47812: Wing FTP Server <= 7.4.3 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2025-47812: Wing FTP Server <= 7.4.3 - Remote Code Execution

漏洞标题 CVE-2025-47812: Wing FTP Server <= 7.4.3 - Remote Code Execution 漏洞描述 Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execu...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年9月24日 03:37
10
CVE-2025-54251: Adobe Experience Manager ≤ 6.5.23.0 - XML Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2025-54251: Adobe Experience Manager ≤ 6.5.23.0 – XML Injection

漏洞标题 CVE-2025-54251: Adobe Experience Manager ≤ 6.5.23.0 - XML Injection 漏洞描述 Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulne...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年3月3日 20:29
10
CVE-2025-40630: IceWarp Mail Server ≤11.4.0 - Open Redirect-渗透云记 - 专注于网络安全与技术分享

CVE-2025-40630: IceWarp Mail Server ≤11.4.0 – Open Redirect

漏洞标题 CVE-2025-40630: IceWarp Mail Server ≤11.4.0 - Open Redirect 漏洞描述 IceWarp Mail Server version 11.4.0 and below contains an open redirect vulnerability that allows atta...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年7月15日 05:33
20
CVE-2025-34077: WordPress Pie Register <= 3.7.1.4 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2025-34077: WordPress Pie Register <= 3.7.1.4 - Authentication Bypass

漏洞标题 CVE-2025-34077: WordPress Pie Register <= 3.7.1.4 - Authentication Bypass 漏洞描述 An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年10月31日 02:58
30
CVE-2025-6851: WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF-渗透云记 - 专注于网络安全与技术分享

CVE-2025-6851: WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF

漏洞标题 CVE-2025-6851: WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF 漏洞描述 The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年3月27日 21:09
20
(CVE-2025-10210) ChanCMS Search功能SQL注入漏洞-渗透云记 - 专注于网络安全与技术分享

(CVE-2025-10210) ChanCMS Search功能SQL注入漏洞

漏洞标题 (CVE-2025-10210) ChanCMS Search功能SQL注入漏洞 漏洞描述 (CVE-2025-10210) ChanCMS Search功能SQL注入漏洞 PoC代码 暂无
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年2月28日 17:26
30
CVE-2025-2748: Kentico Xperience CMS - Unauthenticated Stored XSS-渗透云记 - 专注于网络安全与技术分享

CVE-2025-2748: Kentico Xperience CMS – Unauthenticated Stored XSS

漏洞标题 CVE-2025-2748: Kentico Xperience CMS - Unauthenticated Stored XSS 漏洞描述 The Kentico Xperience application does not fully validate or filter files uploaded via the multi...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年3月3日 04:25
90
CVE-2025-34143: ETQ Reliance - Authentication Bypass via Trailing Space-渗透云记 - 专注于网络安全与技术分享

CVE-2025-34143: ETQ Reliance – Authentication Bypass via Trailing Space

漏洞标题 CVE-2025-34143: ETQ Reliance - Authentication Bypass via Trailing Space 漏洞描述 An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform....
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年7月7日 02:49
50
CVE-2025-46822: Java-springboot-codebase 1.1 - Arbitrary File Read-渗透云记 - 专注于网络安全与技术分享

CVE-2025-46822: Java-springboot-codebase 1.1 – Arbitrary File Read

漏洞标题 CVE-2025-46822: Java-springboot-codebase 1.1 - Arbitrary File Read 漏洞描述 OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, appl...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年11月9日 01:03
00
CVE-2025-25231: Omnissa Workspace ONE UEM - Path Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2025-25231: Omnissa Workspace ONE UEM – Path Traversal

漏洞标题 CVE-2025-25231: Omnissa Workspace ONE UEM - Path Traversal 漏洞描述 Omnissa Workspace ONE UEM contains a path traversal caused by crafted GET requests to restricted API en...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年10月23日 20:44
30
CVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File Exposure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows – Log File Exposure

漏洞标题 CVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File Exposure 漏洞描述 Twonky Server 8.5.2 contains a broken access control vulnerability caused by bypassin...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年3月11日 19:36
00
CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2025-61757: Oracle Identity Manager REST WebServices – Authentication Bypass

漏洞标题 CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass 漏洞描述 Vulnerability in the Identity Manager product of Oracle Fusion Middleware (compon...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2025年4月20日 18:08
00