漏洞库 第253页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2022-34049: WAVLINK WN530HG4 - Improper Access Control-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34049: WAVLINK WN530HG4 – Improper Access Control

漏洞标题 CVE-2022-34049: WAVLINK WN530HG4 - Improper Access Control 漏洞描述 Wavlink WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. An attacker can downloa...
CVE-2025-6851: WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF-渗透云记 - 专注于网络安全与技术分享

CVE-2025-6851: WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF

漏洞标题 CVE-2025-6851: WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF 漏洞描述 The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年9月30日 16:29
30
CVE-2021-39350: FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-39350: FV Flowplayer Video Player WordPress plugin – Authenticated Cross-Site Scripting

漏洞标题 CVE-2021-39350: FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting 漏洞描述 The FV Flowplayer Video Player WordPress plugin is vulnerable to ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年5月14日 12:53
30
CVE-2023-28665: Woo Bulk Price Update <2.2.2 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-28665: Woo Bulk Price Update <2.2.2 - Cross-Site Scripting

漏洞标题 CVE-2023-28665: Woo Bulk Price Update <2.2.2 - Cross-Site Scripting 漏洞描述 The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflec...
CVE-2023-7164: WordPress BackWPup < 4.0.4 - Backup File Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2023-7164: WordPress BackWPup < 4.0.4 - Backup File Disclosure

漏洞标题 CVE-2023-7164: WordPress BackWPup < 4.0.4 - Backup File Disclosure 漏洞描述 BackWPup WordPress plugin < 4.0.4 contains a directory listing vulnerability caused by la...
CVE-2024-11728: KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2024-11728: KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection

漏洞标题 CVE-2024-11728: KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection 漏洞描述 The KiviCare Clinic & Patient Management System (EHR) plugin...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2024年6月17日 16:17
30
CVE-2017-18536: WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2017-18536: WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting

漏洞标题 CVE-2017-18536: WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting 漏洞描述 WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthentica...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2017年4月6日 06:24
30
CVE-2023-3848: MooDating 1.2 - Cross-site scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-3848: MooDating 1.2 – Cross-site scripting

漏洞标题 CVE-2023-3848: MooDating 1.2 - Cross-site scripting 漏洞描述 A vulnerability, which was classified as problematic, has been found in mooSocial mooDating 1.2. This issue af...
CVE-2020-12800: WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2020-12800: WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution

漏洞标题 CVE-2020-12800: WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution 漏洞描述 WordPress Contact Form 7 before 1.3.3.3 allows unrestricted file upload and remote co...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2020年8月14日 05:11
30
CVE-2021-2135: Oracle WebLogic Server - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2021-2135: Oracle WebLogic Server – Remote Code Execution

漏洞标题 CVE-2021-2135: Oracle WebLogic Server - Remote Code Execution 漏洞描述 Oracle WebLogic Server (12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0) contains a remote code execution caused ...
CVE-2021-41773: Apache 2.4.49 - Path Traversal and Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2021-41773: Apache 2.4.49 – Path Traversal and Remote Code Execution

漏洞标题 CVE-2021-41773: Apache 2.4.49 - Path Traversal and Remote Code Execution 漏洞描述 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年2月10日 10:10
30
CVE-2024-6460: WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2024-6460: WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusion

漏洞标题 CVE-2024-6460: WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusion 漏洞描述 The Grow by Tradedoubler WordPress plugin through version ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2024年3月29日 22:10
30
CVE-2024-8503: VICIdial - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2024-8503: VICIdial – SQL Injection

漏洞标题 CVE-2024-8503: VICIdial - SQL Injection 漏洞描述 An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database record...
CVE-2023-43261: Milesight Routers - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2023-43261: Milesight Routers – Information Disclosure

漏洞标题 CVE-2023-43261: Milesight Routers - Information Disclosure 漏洞描述 A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, comprom...
CVE-2014-5368: WordPress Plugin WP Content Source Control - Directory Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2014-5368: WordPress Plugin WP Content Source Control – Directory Traversal

漏洞标题 CVE-2014-5368: WordPress Plugin WP Content Source Control - Directory Traversal 漏洞描述 A directory traversal vulnerability in the file_get_contents function in downloadf...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2014年12月21日 18:43
30
CVE-2016-1000127: WordPress AJAX Random Post <=2.00 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2016-1000127: WordPress AJAX Random Post <=2.00 - Cross-Site Scripting

漏洞标题 CVE-2016-1000127: WordPress AJAX Random Post <=2.00 - Cross-Site Scripting 漏洞描述 WordPress AJAX Random Post 2.00 is vulnerable to reflected cross-site scripting. PoC...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2016年3月10日 19:45
30