漏洞库 第390页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2025-44136: MapTiler Tileserver-php v2.0 - Unauthenticated XSS-渗透云记 - 专注于网络安全与技术分享

CVE-2025-44136: MapTiler Tileserver-php v2.0 – Unauthenticated XSS

漏洞标题 CVE-2025-44136: MapTiler Tileserver-php v2.0 - Unauthenticated XSS 漏洞描述 MapTiler Tileserver-php v2.0 contains a reflected XSS caused by unencoded reflection of the GET...
CVE-2025-55190: ArgoCD Project API Token Repository Credentials Exposure-渗透云记 - 专注于网络安全与技术分享

CVE-2025-55190: ArgoCD Project API Token Repository Credentials Exposure

漏洞标题 CVE-2025-55190: ArgoCD Project API Token Repository Credentials Exposure 漏洞描述 Argo CD API tokens with project-level permissions are able to retrieve sensitive reposito...
CVE-2021-43287: Pre-Auth Takeover of Build Pipelines in GoCD-渗透云记 - 专注于网络安全与技术分享

CVE-2021-43287: Pre-Auth Takeover of Build Pipelines in GoCD

漏洞标题 CVE-2021-43287: Pre-Auth Takeover of Build Pipelines in GoCD 漏洞描述 GoCD contains a critical information disclosure vulnerability whose exploitation allows unauthenticat...
CVE-2021-43287: Pre-Auth Takeover of Build Pipelines in GoCD-渗透云记 - 专注于网络安全与技术分享

CVE-2021-43287: Pre-Auth Takeover of Build Pipelines in GoCD

漏洞标题 CVE-2021-43287: Pre-Auth Takeover of Build Pipelines in GoCD 漏洞描述 GoCD contains a critical information disclosure vulnerability whose exploitation allows unauthenticat...
CVE-2019-7238: Sonatype Nexus Repository Manager  <3.15.0 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2019-7238: Sonatype Nexus Repository Manager <3.15.0 - Remote Code Execution

漏洞标题 CVE-2019-7238: Sonatype Nexus Repository Manager <3.15.0 - Remote Code Execution 漏洞描述 Sonatype Nexus Repository Manager before 3.15.0 is susceptible to remote code ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2019年11月23日 13:54
30
CVE-2020-10199: Sonatype Nexus Repository Manager 3 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2020-10199: Sonatype Nexus Repository Manager 3 – Remote Code Execution

漏洞标题 CVE-2020-10199: Sonatype Nexus Repository Manager 3 - Remote Code Execution 漏洞描述 Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection PoC代码
CVE-2024-4956: Sonatype Nexus Repository Manager 3 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2024-4956: Sonatype Nexus Repository Manager 3 – Local File Inclusion

漏洞标题 CVE-2024-4956: Sonatype Nexus Repository Manager 3 - Local File Inclusion 漏洞描述 Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read...
CVE-2023-1496: Imgproxy < 3.14.0 - Cross-site Scripting (XSS)-渗透云记 - 专注于网络安全与技术分享

CVE-2023-1496: Imgproxy < 3.14.0 - Cross-site Scripting (XSS)

漏洞标题 CVE-2023-1496: Imgproxy < 3.14.0 - Cross-site Scripting (XSS) 漏洞描述 Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0. Po...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年9月26日 17:39
20
CVE-2023-30019: Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)-渗透云记 - 专注于网络安全与技术分享

CVE-2023-30019: Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)

漏洞标题 CVE-2023-30019: Imgproxy <= 3.14.0 - Server-side request forgery (SSRF) 漏洞描述 imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年11月17日 09:32
60
CVE-2025-24354: Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)-渗透云记 - 专注于网络安全与技术分享

CVE-2025-24354: Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)

漏洞标题 CVE-2025-24354: Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF) 漏洞描述 imgproxy contains an issue caused by not blocking the 0.0.0.0 address even when IMGPROXY...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年4月24日 03:45
10
CVE-2019-8937: HotelDruid 2.3.0 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2019-8937: HotelDruid 2.3.0 – Cross-Site Scripting

漏洞标题 CVE-2019-8937: HotelDruid 2.3.0 - Cross-Site Scripting 漏洞描述 HotelDruid 2.3.0 contains a cross-site scripting vulnerability affecting nsextt, cambia1, mese_fine, origin...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2019年12月30日 20:43
50
CVE-2022-26564: HotelDruid Hotel Management Software 3.0.3 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-26564: HotelDruid Hotel Management Software 3.0.3 – Cross-Site Scripting

漏洞标题 CVE-2022-26564: HotelDruid Hotel Management Software 3.0.3 - Cross-Site Scripting 漏洞描述 HotelDruid Hotel Management Software 3.0.3 contains a cross-site scripting vulne...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月14日 01:45
60
CVE-2023-34537: Hoteldruid 3.0.5 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-34537: Hoteldruid 3.0.5 – Cross-Site Scripting

漏洞标题 CVE-2023-34537: Hoteldruid 3.0.5 - Cross-Site Scripting 漏洞描述 A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command o...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年10月29日 05:08
60
CVE-2023-43373: Hoteldruid v3.0.5 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-43373: Hoteldruid v3.0.5 – SQL Injection

漏洞标题 CVE-2023-43373: Hoteldruid v3.0.5 - SQL Injection 漏洞描述 Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg parameter at /hot...
CVE-2023-43374: Hoteldruid v3.0.5 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-43374: Hoteldruid v3.0.5 – SQL Injection

漏洞标题 CVE-2023-43374: Hoteldruid v3.0.5 - SQL Injection 漏洞描述 Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log parameter at /ho...
CVE-2022-31101: Prestashop Blockwishlist 2.1.0 SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-31101: Prestashop Blockwishlist 2.1.0 SQL Injection

漏洞标题 CVE-2022-31101: Prestashop Blockwishlist 2.1.0 SQL Injection 漏洞描述 Prestashop Blockwishlist module version 2.1.0 suffers from a remote authenticated SQL injection vulne...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月23日 15:05
40