漏洞库 第471页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2019-10232: Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2019-10232: Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection

漏洞标题 CVE-2019-10232: Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection 漏洞描述 Teclib GLPI <= 9.3.3 exposes a script (/scripts/unlock_tasks.php) that incorrectly sani...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2019年9月11日 09:40
10
Atlassian Jira Confluence xss(CVE-2018-5230)-渗透云记 - 专注于网络安全与技术分享

Atlassian Jira Confluence xss(CVE-2018-5230)

漏洞标题 Atlassian Jira Confluence xss(CVE-2018-5230) 漏洞描述 版本7.6.6之前的Atlassian JiraConfluence、版本7.7.4之前的版本7.7.0、版本7.8.4之前的7.8.0以及版本7.9.2之前的7.9.0,允许...
CVE-2020-11710: Kong API Gateway Unauthorized-渗透云记 - 专注于网络安全与技术分享

CVE-2020-11710: Kong API Gateway Unauthorized

漏洞标题 CVE-2020-11710: Kong API Gateway Unauthorized 漏洞描述 An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on interfaces ...
CVE-2019-12985: Citrix SD-WAN Center - Remote Command Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2019-12985: Citrix SD-WAN Center – Remote Command Injection

漏洞标题 CVE-2019-12985: Citrix SD-WAN Center - Remote Command Injection 漏洞描述 Citrix SD-WAN Center is susceptible to remote command injection via the ping function in Diagnosti...
CVE-2024-10081: CodeChecker <= 6.24.1 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2024-10081: CodeChecker <= 6.24.1 - Authentication Bypass

漏洞标题 CVE-2024-10081: CodeChecker <= 6.24.1 - Authentication Bypass 漏洞描述 Authentication bypass occurs when the API URL ends with Authentication, Configuration or ServerIn...
CVE-2023-26256: STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2023-26256: STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

漏洞标题 CVE-2023-26256: STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion 漏洞描述 STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 i...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2023年9月12日 23:13
10
CVE-2021-33221: CommScope Ruckus IoT Controller - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2021-33221: CommScope Ruckus IoT Controller – Information Disclosure

漏洞标题 CVE-2021-33221: CommScope Ruckus IoT Controller - Information Disclosure 漏洞描述 CommScope Ruckus IoT Controller is susceptible to information disclosure vulnerabilities ...
CVE-2018-19892: DomainMOD 4.11.01 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2018-19892: DomainMOD 4.11.01 – Cross-Site Scripting

漏洞标题 CVE-2018-19892: DomainMOD 4.11.01 - Cross-Site Scripting 漏洞描述 DomainMOD 4.11.01 contains a cross-site scripting vulnerability via /domain//admin/dw/add-server.php Disp...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2018年2月19日 17:15
10
Adobe ColdFusion IPFilterUtils CVE-2023-38205 认证绕过漏洞-渗透云记 - 专注于网络安全与技术分享

Adobe ColdFusion IPFilterUtils CVE-2023-38205 认证绕过漏洞

漏洞标题 Adobe ColdFusion IPFilterUtils CVE-2023-38205 认证绕过漏洞 漏洞描述 Adobe ColdFusion中存在不正当访问控制漏洞,可绕过认证功能。该漏洞是由于IPFilterUtils类对URL路径的验证不...
CVE-2020-22209: 74cms - ajax_common.php SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2020-22209: 74cms – ajax_common.php SQL Injection

漏洞标题 CVE-2020-22209: 74cms - ajax_common.php SQL Injection 漏洞描述 SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php. PoC代码
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2020年11月16日 05:36
10
CVE-2018-10736: Nagios XI SQL Inject-渗透云记 - 专注于网络安全与技术分享

CVE-2018-10736: Nagios XI SQL Inject

漏洞标题 CVE-2018-10736: Nagios XI SQL Inject 漏洞描述 Nagios XI SQL Inject PoC代码
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2018年7月31日 19:37
10
CVE-2024-1209: LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments-渗透云记 - 专注于网络安全与技术分享

CVE-2024-1209: LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments

漏洞标题 CVE-2024-1209: LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments 漏洞描述 The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Inform...
CVE-2021-25099: WordPress GiveWP <2.17.3 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-25099: WordPress GiveWP <2.17.3 - Cross-Site Scripting

漏洞标题 CVE-2021-25099: WordPress GiveWP <2.17.3 - Cross-Site Scripting 漏洞描述 WordPress GiveWP plugin before 2.17.3 contains a cross-site scripting vulnerability. The plugin...
CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass

漏洞标题 CVE-2023-6875: WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass 漏洞描述 The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP ...
CVE-2021-46417: Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion-渗透云记 - 专注于网络安全与技术分享

CVE-2021-46417: Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 – Local File Inclusion

漏洞标题 CVE-2021-46417: Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion 漏洞描述 Franklin Fueling Systems Colibri Controller Module 1.8.19.85...
CVE-2023-0126: SonicWall SMA1000 LFI-渗透云记 - 专注于网络安全与技术分享

CVE-2023-0126: SonicWall SMA1000 LFI

漏洞标题 CVE-2023-0126: SonicWall SMA1000 LFI 漏洞描述 Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker ...
云记的头像-渗透云记 - 专注于网络安全与技术分享初心赞助云记2023年9月15日 22:03
10