漏洞库 第638页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2022-29349: kkFileView 4.0.0 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-29349: kkFileView 4.0.0 – Cross-Site Scripting

漏洞标题 CVE-2022-29349: kkFileView 4.0.0 - Cross-Site Scripting 漏洞描述 kkFileView 4.0.0 contains multiple cross-site scripting vulnerabilities via the urls and currentUrl parame...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年8月15日 20:25
30
CVE-2022-30525: Zyxel Firewall - OS Command Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-30525: Zyxel Firewall – OS Command Injection

漏洞标题 CVE-2022-30525: Zyxel Firewall - OS Command Injection 漏洞描述 An OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 thr...
CVE-2023-3479: Hestiacp <= 1.7.7 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2023-3479: Hestiacp <= 1.7.7 - Cross-Site Scripting

漏洞标题 CVE-2023-3479: Hestiacp <= 1.7.7 - Cross-Site Scripting 漏洞描述 Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8. PoC代码
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年7月20日 11:22
30
CVE-2022-33901: WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read-渗透云记 - 专注于网络安全与技术分享

CVE-2022-33901: WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read

漏洞标题 CVE-2022-33901: WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read 漏洞描述 WordPress MultiSafepay for WooCommerce plugin through 4.13.1 contains an ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年1月1日 17:57
30
CVE-2024-32238: H3C ER8300G2-X - Password Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2024-32238: H3C ER8300G2-X – Password Disclosure

漏洞标题 CVE-2024-32238: H3C ER8300G2-X - Password Disclosure 漏洞描述 H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management syste...
CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting

漏洞标题 CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting 漏洞描述 WordPress WPQA plugin prior to 5.4 contains a reflected cross-site scripting vulnerability. It does n...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年2月20日 11:44
30
CVE-2022-25149: WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-25149: WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection

漏洞标题 CVE-2022-25149: WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection 漏洞描述 The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient ...
CVE-2022-22242: Juniper Networks Junos OS 错误页面反射 XSS 漏洞-渗透云记 - 专注于网络安全与技术分享

CVE-2022-22242: Juniper Networks Junos OS 错误页面反射 XSS 漏洞

漏洞标题 CVE-2022-22242: Juniper Networks Junos OS 错误页面反射 XSS 漏洞 漏洞描述 CVE-2022-22242它是位于出错页面 (“error.php”) 上的预认证反射型XSS漏洞,可导致远程攻击者嗅探 Junos...
CVE-2021-31602: Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2021-31602: Hitachi Vantara Pentaho/Business Intelligence Server – Authentication Bypass

漏洞标题 CVE-2021-31602: Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass 漏洞描述 Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年6月27日 14:09
30
CVE-2020-26217: XStream <1.4.14 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2020-26217: XStream <1.4.14 - Remote Code Execution

漏洞标题 CVE-2020-26217: XStream <1.4.14 - Remote Code Execution 漏洞描述 XStream before 1.4.14 is susceptible to remote code execution. An attacker can run arbitrary shell comm...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2020年10月22日 13:45
30
CVE-2021-25003: WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2021-25003: WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution

漏洞标题 CVE-2021-25003: WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution 漏洞描述 WordPress WPCargo Track & Trace plugin before 6.9.0 is susceptible to re...
CVE-2024-1061: WordPress HTML5 Video Player - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2024-1061: WordPress HTML5 Video Player – SQL Injection

漏洞标题 CVE-2024-1061: WordPress HTML5 Video Player - SQL Injection 漏洞描述 WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can ex...
CVE-2024-1512: MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2024-1512: MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

漏洞标题 CVE-2024-1512: MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection 漏洞描述 The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordP...
CVE-2022-2383: WordPress Feed Them Social <3.0.1 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2383: WordPress Feed Them Social <3.0.1 - Cross-Site Scripting

漏洞标题 CVE-2022-2383: WordPress Feed Them Social <3.0.1 - Cross-Site Scripting 漏洞描述 WordPress Feed Them Social plugin before 3.0.1 contains a reflected cross-site scriptin...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月26日 15:52
30
CVE-2023-36347: POS Codekop v2.0 - Broken Authentication-渗透云记 - 专注于网络安全与技术分享

CVE-2023-36347: POS Codekop v2.0 – Broken Authentication

漏洞标题 CVE-2023-36347: POS Codekop v2.0 - Broken Authentication 漏洞描述 A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated at...
CVE-2022-45805: WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-45805: WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection

漏洞标题 CVE-2022-45805: WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection 漏洞描述 WordPress Paytm Payment Gateway plugin through 2.7.3 contains a SQL injection vulnerabi...