漏洞库 第562页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2024-3822: Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2024-3822: Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Scripting

漏洞标题 CVE-2024-3822: Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Scripting 漏洞描述 The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2024年8月18日 01:34
30
CVE-2020-9496: Apache OFBiz 17.12.03 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2020-9496: Apache OFBiz 17.12.03 – Cross-Site Scripting

漏洞标题 CVE-2020-9496: Apache OFBiz 17.12.03 - Cross-Site Scripting 漏洞描述 Apache OFBiz 17.12.03 contains cross-site scripting and unsafe deserialization vulnerabilities via an ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2020年7月20日 17:13
30
CVE-2022-4050: WordPress JoomSport <5.2.8 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-4050: WordPress JoomSport <5.2.8 - SQL Injection

漏洞标题 CVE-2022-4050: WordPress JoomSport <5.2.8 - SQL Injection 漏洞描述 WordPress JoomSport plugin before 5.2.8 contains a SQL injection vulnerability. The plugin does not p...
CVE-2024-38289: TurboMeeting - Boolean-based SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2024-38289: TurboMeeting – Boolean-based SQL Injection

漏洞标题 CVE-2024-38289: TurboMeeting - Boolean-based SQL Injection 漏洞描述 A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This ...
CVE-2024-10486: Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File-渗透云记 - 专注于网络安全与技术分享

CVE-2024-10486: Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File

漏洞标题 CVE-2024-10486: Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File 漏洞描述 The Google for WooCommerce plugin for WordPress ...
CVE-2020-9043: WordPress wpCentral <1.5.1 - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2020-9043: WordPress wpCentral <1.5.1 - Information Disclosure

漏洞标题 CVE-2020-9043: WordPress wpCentral <1.5.1 - Information Disclosure 漏洞描述 WordPress wpCentral plugin before 1.5.1 is susceptible to information disclosure. An attacke...
CVE-2012-5913: WordPress Integrator 1.32 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2012-5913: WordPress Integrator 1.32 – Cross-Site Scripting

漏洞标题 CVE-2012-5913: WordPress Integrator 1.32 - Cross-Site Scripting 漏洞描述 A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2012年10月29日 15:26
30
CVE-2023-36287: Webkul QloApps 1.6.0 - Cross-site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-36287: Webkul QloApps 1.6.0 – Cross-site Scripting

漏洞标题 CVE-2023-36287: Webkul QloApps 1.6.0 - Cross-site Scripting 漏洞描述 An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an at...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年11月19日 04:36
30
CVE-2021-31581: Akkadian Provisioning Manager - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2021-31581: Akkadian Provisioning Manager – Information Disclosure

漏洞标题 CVE-2021-31581: Akkadian Provisioning Manager - Information Disclosure 漏洞描述 Akkadian Provisioning Manager is susceptible to information disclosure. The restricted shel...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年4月17日 05:10
30
CVE-2022-26263: Yonyou U8 13.0 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-26263: Yonyou U8 13.0 – Cross-Site Scripting

漏洞标题 CVE-2022-26263: Yonyou U8 13.0 - Cross-Site Scripting 漏洞描述 Yonyou U8 13.0 contains a DOM-based cross-site scripting vulnerability via the component /u8sl/WebHelp. An a...
CVE-2022-34305: Apache Tomcat Examples Web Application - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34305: Apache Tomcat Examples Web Application – Cross-Site Scripting

漏洞标题 CVE-2022-34305: Apache Tomcat Examples Web Application - Cross-Site Scripting 漏洞描述 Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年1月23日 13:22
30
CVE-2020-25506: D-Link DNS-320 - Unauthenticated Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2020-25506: D-Link DNS-320 – Unauthenticated Remote Code Execution

漏洞标题 CVE-2020-25506: D-Link DNS-320 - Unauthenticated Remote Code Execution 漏洞描述 D-Link DNS-320 FW v2.06B01 Revision Ax is susceptible to a command injection vulnerability ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2020年11月3日 11:24
30
CVE-2022-41840: Welcart eCommerce <= 2.7.7 - Unauth Directory Traversal-渗透云记 - 专注于网络安全与技术分享

CVE-2022-41840: Welcart eCommerce <= 2.7.7 - Unauth Directory Traversal

漏洞标题 CVE-2022-41840: Welcart eCommerce <= 2.7.7 - Unauth Directory Traversal 漏洞描述 Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on Wo...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月23日 02:40
30
CVE-2021-31589: BeyondTrust Secure Remote Access Base <=6.0.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2021-31589: BeyondTrust Secure Remote Access Base <=6.0.1 - Cross-Site Scripting

漏洞标题 CVE-2021-31589: BeyondTrust Secure Remote Access Base <=6.0.1 - Cross-Site Scripting 漏洞描述 BeyondTrust Secure Remote Access Base through 6.0.1 contains a cross-site ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年10月19日 05:56
30
CVE-2021-24175: The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2021-24175: The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

漏洞标题 CVE-2021-24175: The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass 漏洞描述 The Plus Addons for Elementor plugin (before version 4.1.7) allowed ...
CVE-2025-27223: TRUfusion Enterprise <= 7.10.4.0 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2025-27223: TRUfusion Enterprise <= 7.10.4.0 - Authentication Bypass

漏洞标题 CVE-2025-27223: TRUfusion Enterprise <= 7.10.4.0 - Authentication Bypass 漏洞描述 Hard-Coded Cryptographic key allowing to forge session cookies that can be used to ent...