漏洞库 第11页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2021-41349: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-41349: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting

漏洞标题 CVE-2021-41349: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting 漏洞描述 Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware t...
CVE-2018-14013: Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2018-14013: Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting

漏洞标题 CVE-2018-14013: Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting 漏洞描述 Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2018年11月28日 12:28
20
CVE-2023-38952: ZKTeco BioTime <= 9.0.1 - Privilege Escalation-渗透云记 - 专注于网络安全与技术分享

CVE-2023-38952: ZKTeco BioTime <= 9.0.1 - Privilege Escalation

漏洞标题 CVE-2023-38952: ZKTeco BioTime <= 9.0.1 - Privilege Escalation 漏洞描述 BioTime default employee credentials (password 123456) allow login. Sessions are not role-valida...
CVE-2009-4223: KR-Web <=1.1b2 - Remote File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2009-4223: KR-Web <=1.1b2 - Remote File Inclusion

漏洞标题 CVE-2009-4223: KR-Web <=1.1b2 - Remote File Inclusion 漏洞描述 KR-Web 1.1b2 and prior contain a remote file inclusion vulnerability via adm/krgourl.php, which allows re...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2009年10月24日 00:38
10
CVE-2022-32429: MSNSwitch Firmware MNT.2408 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2022-32429: MSNSwitch Firmware MNT.2408 – Authentication Bypass

漏洞标题 CVE-2022-32429: MSNSwitch Firmware MNT.2408 - Authentication Bypass 漏洞描述 MSNSwitch Firmware MNT.2408 is susceptible to authentication bypass in the component http://MY...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年7月31日 11:14
40
CVE-2021-24169: WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24169: WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting

漏洞标题 CVE-2021-24169: WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting 漏洞描述 WordPress Advanced Order Export For WooCommerce plu...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年4月28日 17:47
10
CVE-2018-16299: WordPress Localize My Post 1.0 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2018-16299: WordPress Localize My Post 1.0 – Local File Inclusion

漏洞标题 CVE-2018-16299: WordPress Localize My Post 1.0 - Local File Inclusion 漏洞描述 WordPress Localize My Post 1.0 is susceptible to local file inclusion via the ajax/include.p...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2018年12月11日 02:41
00
CVE-2023-22047: Oracle Peoplesoft - Unauthenticated File Read-渗透云记 - 专注于网络安全与技术分享

CVE-2023-22047: Oracle Peoplesoft – Unauthenticated File Read

漏洞标题 CVE-2023-22047: Oracle Peoplesoft - Unauthenticated File Read 漏洞描述 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component- Port...
CVE-2010-2857: Joomla! Component Music Manager - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2010-2857: Joomla! Component Music Manager – Local File Inclusion

漏洞标题 CVE-2010-2857: Joomla! Component Music Manager - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the Music Manager component for Joomla! allows remote...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2010年1月26日 16:52
20
CVE-2022-24716: Icinga Web 2 - Arbitrary File Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2022-24716: Icinga Web 2 – Arbitrary File Disclosure

漏洞标题 CVE-2022-24716: Icinga Web 2 - Arbitrary File Disclosure 漏洞描述 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenti...
CVE-2021-24657: Limit Login Attempts WordPress - Stored Cross-site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24657: Limit Login Attempts WordPress – Stored Cross-site Scripting

漏洞标题 CVE-2021-24657: Limit Login Attempts WordPress - Stored Cross-site Scripting 漏洞描述 Limit Login Attempts WordPress plugin < 4.0.50 contains a stored cross-site script...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年5月4日 11:22
10
CVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting

漏洞标题 CVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting 漏洞描述 Palo Alto Networks PAN-OS before 8.1.4 GlobalProtect Portal Login page al...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2018年12月27日 10:00
20
CVE-2023-40750: PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-40750: PHPJabbers Yacht Listing Script v1.0 – Cross-Site Scripting

漏洞标题 CVE-2023-40750: PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting 漏洞描述 There is a Cross Site Scripting (XSS) vulnerability in the "action" paramete...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年12月8日 21:43
20
CVE-2010-1313: Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2010-1313: Joomla! Component Saber Cart 1.0.0.12 – Local File Inclusion

漏洞标题 CVE-2010-1313: Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion 漏洞描述 A directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0....
CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting

漏洞标题 CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting 漏洞描述 WordPress WPQA plugin prior to 5.4 contains a reflected cross-site scripting vulnerability. It does n...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年8月7日 07:45
00
CVE-2021-20167: Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun-渗透云记 - 专注于网络安全与技术分享

CVE-2021-20167: Netgear RAX43 1.0.3.96 – Command Injection/Authentication Bypass Buffer Overrun

漏洞标题 CVE-2021-20167: Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun 漏洞描述 Netgear RAX43 version 1.0.3.96 contains a command injection and au...