漏洞库 第386页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
(CVE-2022-0540) Atlassian Jira Seraph 身份验证绕过漏洞-渗透云记 - 专注于网络安全与技术分享

(CVE-2022-0540) Atlassian Jira Seraph 身份验证绕过漏洞

漏洞标题 (CVE-2022-0540) Atlassian Jira Seraph 身份验证绕过漏洞 漏洞描述 (CVE-2022-0540) Atlassian Jira Seraph 身份验证绕过漏洞 PoC代码 暂无
CVE-2022-0784: WordPress Title Experiments Free <9.0.1 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0784: WordPress Title Experiments Free <9.0.1 - SQL Injection

漏洞标题 CVE-2022-0784: WordPress Title Experiments Free <9.0.1 - SQL Injection 漏洞描述 WordPress Title Experiments Free plugin before 9.0.1 contains a SQL injection vulnerabil...
CVE-2022-32772: WWBN AVideo 11.6 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-32772: WWBN AVideo 11.6 – Cross-Site Scripting

漏洞标题 CVE-2022-32772: WWBN AVideo 11.6 - Cross-Site Scripting 漏洞描述 WWBN AVideo 11.6 contains a cross-site scripting vulnerability in the footer alerts functionality via the ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月24日 16:10
10
CVE-2022-36883: Jenkins Git <=4.11.3 - Missing Authorization-渗透云记 - 专注于网络安全与技术分享

CVE-2022-36883: Jenkins Git <=4.11.3 - Missing Authorization

漏洞标题 CVE-2022-36883: Jenkins Git <=4.11.3 - Missing Authorization 漏洞描述 Jenkins Git plugin through 4.11.3 contains a missing authorization check. An attacker can trigger ...
CVE-2022-43140: kkFileView 4.1.0 - Server-Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2022-43140: kkFileView 4.1.0 – Server-Side Request Forgery

漏洞标题 CVE-2022-43140: kkFileView 4.1.0 - Server-Side Request Forgery 漏洞描述 kkFileView 4.1.0 is susceptible to server-side request forgery via the component cn.keking.web.cont...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月24日 05:52
20
CVE-2022-0760: WordPress Simple Link Directory <7.7.2 - SQL injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0760: WordPress Simple Link Directory <7.7.2 - SQL injection

漏洞标题 CVE-2022-0760: WordPress Simple Link Directory <7.7.2 - SQL injection 漏洞描述 WordPress Simple Link Directory plugin before 7.7.2 contains a SQL injection vulnerabilit...
CVE-2022-40881: SolarView 6.00 - Remote Command Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2022-40881: SolarView 6.00 – Remote Command Execution

漏洞标题 CVE-2022-40881: SolarView 6.00 - Remote Command Execution 漏洞描述 SolarView Compact 6.00 is vulnerable to a command injection via network_test.php. PoC代码
CVE-2022-31101: Prestashop Blockwishlist 2.1.0 SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-31101: Prestashop Blockwishlist 2.1.0 SQL Injection

漏洞标题 CVE-2022-31101: Prestashop Blockwishlist 2.1.0 SQL Injection 漏洞描述 Prestashop Blockwishlist module version 2.1.0 suffers from a remote authenticated SQL injection vulne...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月23日 15:05
30
CVE-2022-3142: NEX-Forms Plugin < 7.9.7 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-3142: NEX-Forms Plugin < 7.9.7 - SQL Injection

漏洞标题 CVE-2022-3142: NEX-Forms Plugin < 7.9.7 - SQL Injection 漏洞描述 The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before usi...
CVE-2022-26138: Atlassian Questions For Confluence - Hardcoded Credentials-渗透云记 - 专注于网络安全与技术分享

CVE-2022-26138: Atlassian Questions For Confluence – Hardcoded Credentials

漏洞标题 CVE-2022-26138: Atlassian Questions For Confluence - Hardcoded Credentials 漏洞描述 Atlassian Questions For Confluence contains a hardcoded credentials vulnerability. When...
CVE-2022-21500: Oracle E-Business Suite <=12.2 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2022-21500: Oracle E-Business Suite <=12.2 - Authentication Bypass

漏洞标题 CVE-2022-21500: Oracle E-Business Suite <=12.2 - Authentication Bypass 漏洞描述 Oracle E-Business Suite (component: Manage Proxies) 12.1 and 12.2 are susceptible to an ...
CVE-2022-2383: WordPress Feed Them Social <3.0.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2383: WordPress Feed Them Social <3.0.1 - Cross-Site Scripting

漏洞标题 CVE-2022-2383: WordPress Feed Them Social <3.0.1 - Cross-Site Scripting 漏洞描述 WordPress Feed Them Social plugin before 3.0.1 contains a reflected cross-site scriptin...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月23日 07:09
00
CVE-2022-34576: WAVLINK WN535 G3 - Improper Access Control-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34576: WAVLINK WN535 G3 – Improper Access Control

漏洞标题 CVE-2022-34576: WAVLINK WN535 G3 - Improper Access Control 漏洞描述 WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to improper access control. A vulnerability in /cgi...
CVE-2022-29272: Nagios XI <5.8.5 - Open Redirect-渗透云记 - 专注于网络安全与技术分享

CVE-2022-29272: Nagios XI <5.8.5 - Open Redirect

漏洞标题 CVE-2022-29272: Nagios XI <5.8.5 - Open Redirect 漏洞描述 Nagios XI through 5.8.5 contains an open redirect vulnerability in the login function. An attacker can redirec...
CVE-2022-30073: WBCE CMS 1.5.2 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-30073: WBCE CMS 1.5.2 – Cross-Site Scripting

漏洞标题 CVE-2022-30073: WBCE CMS 1.5.2 - Cross-Site Scripting 漏洞描述 WBCE CMS 1.5.2 contains a stored cross-site scripting vulnerability via \admin\user\save.php Display Name pa...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月23日 02:08
10
CVE-2022-34534: Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34534: Digital Watchdog DW Spectrum Server 4.2.0.32842 – Information Disclosure

漏洞标题 CVE-2022-34534: Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure 漏洞描述 Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to acces...