漏洞库 第152页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2023-44813: mooSocial v.3.1.8 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-44813: mooSocial v.3.1.8 – Cross-Site Scripting

漏洞标题 CVE-2023-44813: mooSocial v.3.1.8 - Cross-Site Scripting 漏洞描述 Cross-Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitra...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年7月27日 00:05
10
CVE-2022-34093: Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34093: Software Publico Brasileiro i3geo v7.0.5 – Cross-Site Scripting

漏洞标题 CVE-2022-34093: Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting 漏洞描述 Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cro...
CVE-2021-39146: XStream 1.4.18 - Arbitrary Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2021-39146: XStream 1.4.18 – Arbitrary Code Execution

漏洞标题 CVE-2021-39146: XStream 1.4.18 - Arbitrary Code Execution 漏洞描述 XStream 1.4.18 is susceptible to remote code execution. An attacker can execute commands of the host by ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年1月5日 04:55
50
CVE-2025-30208: Vite - Arbitrary File Read-渗透云记 - 专注于网络安全与技术分享

CVE-2025-30208: Vite – Arbitrary File Read

漏洞标题 CVE-2025-30208: Vite - Arbitrary File Read 漏洞描述 Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15...
CVE-2018-13379: Fortinet FortiOS - Credentials Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2018-13379: Fortinet FortiOS – Credentials Disclosure

漏洞标题 CVE-2018-13379: Fortinet FortiOS - Credentials Disclosure 漏洞描述 Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2018年2月22日 04:40
40
CVE-2023-3188: Owncast - Server Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2023-3188: Owncast – Server Side Request Forgery

漏洞标题 CVE-2023-3188: Owncast - Server Side Request Forgery 漏洞描述 Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0. PoC代码
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年8月1日 23:31
00
CVE-2022-4060: WordPress User Post Gallery <=2.19 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2022-4060: WordPress User Post Gallery <=2.19 - Remote Code Execution

漏洞标题 CVE-2022-4060: WordPress User Post Gallery <=2.19 - Remote Code Execution 漏洞描述 WordPress User Post Gallery plugin through 2.19 is susceptible to remote code executi...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年4月18日 19:09
00
CVE-2021-38146: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download-渗透云记 - 专注于网络安全与技术分享

CVE-2021-38146: Wipro Holmes Orchestrator 20.4.1 – Arbitrary File Download

漏洞标题 CVE-2021-38146: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download 漏洞描述 The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows re...
CVE-2025-51991: XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)-渗透云记 - 专注于网络安全与技术分享

CVE-2025-51991: XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)

漏洞标题 CVE-2025-51991: XWiki <= 17.3.0 - Server-Side Template Injection (SSTI) 漏洞描述 XWiki <= 17.3.0 contains a server-side template injection caused by improper validat...
CVE-2018-11138: Quest KACE System Management Appliance 8.0.318 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2018-11138: Quest KACE System Management Appliance 8.0.318 – Remote Code Execution

漏洞标题 CVE-2018-11138: Quest KACE System Management Appliance 8.0.318 - Remote Code Execution 漏洞描述 The '/common/download_agent_installer.php' script in the Quest KA...
CVE-2023-46604: Apache ActiveMQ - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-46604: Apache ActiveMQ – Remote Code Execution

漏洞标题 CVE-2023-46604: Apache ActiveMQ - Remote Code Execution 漏洞描述 Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with ...
CVE-2022-2034: WordPress Sensei LMS <4.5.0 - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2034: WordPress Sensei LMS <4.5.0 - Information Disclosure

漏洞标题 CVE-2022-2034: WordPress Sensei LMS <4.5.0 - Information Disclosure 漏洞描述 WordPress Sensei LMS plugin before 4.5.0 is susceptible to information disclosure. The plug...
CVE-2021-39211: GLPI 9.2/<9.5.6 - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2021-39211: GLPI 9.2/<9.5.6 - Information Disclosure

漏洞标题 CVE-2021-39211: GLPI 9.2/<9.5.6 - Information Disclosure 漏洞描述 GLPI 9.2 and prior to 9.5.6 is susceptible to information disclosure via the telemetry endpoint, which...
CVE-2025-30220: GeoServer WFS - XXE Processing Vulnerability-渗透云记 - 专注于网络安全与技术分享

CVE-2025-30220: GeoServer WFS – XXE Processing Vulnerability

漏洞标题 CVE-2025-30220: GeoServer WFS - XXE Processing Vulnerability 漏洞描述 GeoServer Web Feature Service (WFS) is vulnerable to an XML External Entity (XXE) processing attack d...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年6月19日 14:27
40
CVE-2018-8727: Mirasys DVMS Workstation <=5.12.6 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2018-8727: Mirasys DVMS Workstation <=5.12.6 - Local File Inclusion

漏洞标题 CVE-2018-8727: Mirasys DVMS Workstation <=5.12.6 - Local File Inclusion 漏洞描述 Mirasys DVMS Workstation versions 5.12.6 and prior suffer from local file inclusion vul...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2018年3月24日 22:27
40
CVE-2023-0261: WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-0261: WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection

漏洞标题 CVE-2023-0261: WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection 漏洞描述 WordPress WP TripAdvisor Review Slider plugin before 10.8 is suscepti...