漏洞库 第458页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2022-0147: WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0147: WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting

漏洞标题 CVE-2022-0147: WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting 漏洞描述 WordPress Cookie Information/Free GDPR Consent Solution pl...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月16日 17:08
40
CVE-2017-12149: Jboss Application Server - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2017-12149: Jboss Application Server – Remote Code Execution

漏洞标题 CVE-2017-12149: Jboss Application Server - Remote Code Execution 漏洞描述 Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2 is susceptib...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2017年5月17日 10:20
40
CVE-2024-5334: Devika - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2024-5334: Devika – Local File Inclusion

漏洞标题 CVE-2024-5334: Devika - Local File Inclusion 漏洞描述 A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerab...
CVE-2022-3980: Sophos Mobile managed on-premises - XML External Entity Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-3980: Sophos Mobile managed on-premises – XML External Entity Injection

漏洞标题 CVE-2022-3980: Sophos Mobile managed on-premises - XML External Entity Injection 漏洞描述 An XML External Entity (XXE) vulnerability allows server-side request forgery (SS...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月12日 13:37
40
CVE-2007-4556: OpenSymphony XWork/Apache Struts2 - Remote Code Execution S2-001-渗透云记 - 专注于网络安全与技术分享

CVE-2007-4556: OpenSymphony XWork/Apache Struts2 – Remote Code Execution S2-001

漏洞标题 CVE-2007-4556: OpenSymphony XWork/Apache Struts2 - Remote Code Execution S2-001 漏洞描述 Apache Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as...
CVE-2023-34039: VMWare Aria Operations - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2023-34039: VMWare Aria Operations – Remote Code Execution

漏洞标题 CVE-2023-34039: VMWare Aria Operations - Remote Code Execution 漏洞描述 VMWare Aria Operations for Networks (vRealize Network Insight) Static SSH key RCE (CVE-2023-34039) ...
CVE-2025-26319: FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2025-26319: FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload

漏洞标题 CVE-2025-26319: FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload 漏洞描述 FlowiseAI Flowise version 2.2.6 and below contains an arbitrary file upload vulnerability in...
CVE-2021-39433: BIQS IT Biqs-drive v1.83 Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2021-39433: BIQS IT Biqs-drive v1.83 Local File Inclusion

漏洞标题 CVE-2021-39433: BIQS IT Biqs-drive v1.83 Local File Inclusion 漏洞描述 A local file inclusion vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sendi...
CVE-2025-56819: Datart v1.0.0-rc.3 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2025-56819: Datart v1.0.0-rc.3 – Remote Code Execution

漏洞标题 CVE-2025-56819: Datart v1.0.0-rc.3 - Remote Code Execution 漏洞描述 Datart v1.0.0-rc.3 contains a vulnerability that allows remote attackers to execute arbitrary code via ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年1月3日 01:47
40
CVE-2022-0948: WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0948: WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection

漏洞标题 CVE-2022-0948: WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection 漏洞描述 WordPress Order Listener for WooCommerce plugin before 3.2.2 contains a SQL inje...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月20日 11:41
40
CVE-2024-36837: CRMEB v.5.2.2 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2024-36837: CRMEB v.5.2.2 – SQL Injection

漏洞标题 CVE-2024-36837: CRMEB v.5.2.2 - SQL Injection 漏洞描述 SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getPro...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2024年2月4日 10:32
40
CVE-2019-6799: phpMyAdmin <4.8.5 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2019-6799: phpMyAdmin <4.8.5 - Local File Inclusion

漏洞标题 CVE-2019-6799: phpMyAdmin <4.8.5 - Local File Inclusion 漏洞描述 phpMyAdmin before 4.8.5 is susceptible to local file inclusion. When the AllowArbitraryServer configura...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2019年6月22日 07:49
40
CVE-2025-6403: Code-Projects School Fees Payment System 1.0 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2025-6403: Code-Projects School Fees Payment System 1.0 – SQL Injection

漏洞标题 CVE-2025-6403: Code-Projects School Fees Payment System 1.0 - SQL Injection 漏洞描述 A vulnerability was found in code-projects School Fees Payment System 1.0. It has been...
CVE-2021-24300: WordPress WooCommerce <1.13.22 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24300: WordPress WooCommerce <1.13.22 - Cross-Site Scripting

漏洞标题 CVE-2021-24300: WordPress WooCommerce <1.13.22 - Cross-Site Scripting 漏洞描述 WordPress WooCommerce before 1.13.22 contains a reflected cross-site scripting vulnerabil...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年12月4日 04:19
40
CVE-2020-26248: PrestaShop Product Comments <4.2.0 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2020-26248: PrestaShop Product Comments <4.2.0 - SQL Injection

漏洞标题 CVE-2020-26248: PrestaShop Product Comments <4.2.0 - SQL Injection 漏洞描述 PrestaShop Product Comments module before version 4.2.1 contains a SQL injection vulnerabili...
CVE-2025-2473 PHPGurukul 访客管理系统 2.0 SQL注入漏洞-渗透云记 - 专注于网络安全与技术分享

CVE-2025-2473 PHPGurukul 访客管理系统 2.0 SQL注入漏洞

漏洞标题 CVE-2025-2473 PHPGurukul 访客管理系统 2.0 SQL注入漏洞 漏洞描述 CVE-2025-2473 PHPGurukul 访客管理系统 2.0 SQL注入漏洞 PoC代码 暂无
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年9月26日 13:26
40