漏洞库 第223页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2023-47253: Qualitor <= 8.20 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-47253: Qualitor <= 8.20 - Remote Code Execution

漏洞标题 CVE-2023-47253: Qualitor <= 8.20 - Remote Code Execution 漏洞描述 Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/ad...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月13日 23:16
00
CVE-2023-37728: IceWarp Webmail Server v10.2.1 - Cross Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-37728: IceWarp Webmail Server v10.2.1 – Cross Site Scripting

漏洞标题 CVE-2023-37728: IceWarp Webmail Server v10.2.1 - Cross Site Scripting 漏洞描述 Icewarp Icearp v10.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月13日 23:16
40
CVE-2023-43795: GeoServer WPS - Server Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2023-43795: GeoServer WPS – Server Side Request Forgery

漏洞标题 CVE-2023-43795: GeoServer WPS - Server Side Request Forgery 漏洞描述 GeoServer is an open source software server written in Java that allows users to share and edit geospa...
CVE-2023-34124: SonicWall GMS and Analytics Web Services - Shell Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-34124: SonicWall GMS and Analytics Web Services – Shell Injection

漏洞标题 CVE-2023-34124: SonicWall GMS and Analytics Web Services - Shell Injection 漏洞描述 The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficie...
CVE-2023-36144: Intelbras Switch - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2023-36144: Intelbras Switch – Information Disclosure

漏洞标题 CVE-2023-36144: Intelbras Switch - Information Disclosure 漏洞描述 An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated at...
CVE-2023-27640: PrestaShop tshirtecommerce - Directory Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2023-27640: PrestaShop tshirtecommerce – Directory Traversal

漏洞标题 CVE-2023-27640: PrestaShop tshirtecommerce - Directory Traversal 漏洞描述 The Custom Product Designer (tshirtecommerce) module for PrestaShop allows HTTP requests to be fo...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月13日 16:57
20
CVE-2023-46347: PrestaShop Step by Step products Pack - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-46347: PrestaShop Step by Step products Pack – SQL Injection

漏洞标题 CVE-2023-46347: PrestaShop Step by Step products Pack - SQL Injection 漏洞描述 In the module “Step by Step products Pack” (ndk_steppingpack) up to 1.5.6 from NDK Design ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月13日 16:36
10
CVE-2023-35078: Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2023-35078: Ivanti Endpoint Manager Mobile (EPMM) – Authentication Bypass

漏洞标题 CVE-2023-35078: Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass 漏洞描述 Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allow...
CVE-2023-7164: WordPress BackWPup < 4.0.4 - Backup File Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2023-7164: WordPress BackWPup < 4.0.4 - Backup File Disclosure

漏洞标题 CVE-2023-7164: WordPress BackWPup < 4.0.4 - Backup File Disclosure 漏洞描述 BackWPup WordPress plugin < 4.0.4 contains a directory listing vulnerability caused by la...
CVE-2023-37999: HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation-渗透云记 - 专注于网络安全与技术分享

CVE-2023-37999: HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation

漏洞标题 CVE-2023-37999: HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation 漏洞描述 The HT Mega plugin for WordPress is vulnerabl...
CVE-2023-26067: Lexmark Printers - Command Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-26067: Lexmark Printers – Command Injection

漏洞标题 CVE-2023-26067: Lexmark Printers - Command Injection 漏洞描述 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4). PoC代码
CVE-2023-46574: TOTOLINK A3700R - Command Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-46574: TOTOLINK A3700R – Command Injection

漏洞标题 CVE-2023-46574: TOTOLINK A3700R - Command Injection 漏洞描述 An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the ...
CVE-2023-30192: PrestaShop 'possearchproducts' <= 1.7 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-30192: PrestaShop ‘possearchproducts’ <= 1.7 - SQL Injection

漏洞标题 CVE-2023-30192: PrestaShop 'possearchproducts' <= 1.7 - SQL Injection 漏洞描述 In the module “Search Products” (possearchproducts) from PosThemes for Presta...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月13日 05:24
20
CVE-2023-30194: Prestashop posstaticfooter <= 1.0.0 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-30194: Prestashop posstaticfooter <= 1.0.0 - SQL Injection

漏洞标题 CVE-2023-30194: Prestashop posstaticfooter <= 1.0.0 - SQL Injection 漏洞描述 Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月12日 23:33
00
CVE-2023-1893: Login Configurator <=2.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-1893: Login Configurator <=2.1 - Cross-Site Scripting

漏洞标题 CVE-2023-1893: Login Configurator <=2.1 - Cross-Site Scripting 漏洞描述 Login Configurator WordPress plugin <= 2.1 contains a reflected cross-site scripting caused b...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月12日 22:39
20
CVE-2023-3139: Protect WP Admin < 4.0 - Unauthenticated Protection Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2023-3139: Protect WP Admin < 4.0 - Unauthenticated Protection Bypass

漏洞标题 CVE-2023-3139: Protect WP Admin < 4.0 - Unauthenticated Protection Bypass 漏洞描述 The Protect WP Admin WordPress plugin before version 4.0 disclosed the URL of the adm...