漏洞库 第647页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2011-5106: WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2011-5106: WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting

漏洞标题 CVE-2011-5106: WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting 漏洞描述 A cross-site scripting vulnerability in edit-post.php in the Flexible ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2011年5月5日 12:33
30
Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞(CVE-2023-49070)-渗透云记 - 专注于网络安全与技术分享

Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞(CVE-2023-49070)

漏洞标题 Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞(CVE-2023-49070) 漏洞描述 Apache OFBiz是一个开源的企业资源规划(ERP)系统,提供了多种商业功能和模块。Apache OFBiz 在...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年12月4日 18:21
30
CVE-2013-6281: WordPress Spreadsheet - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2013-6281: WordPress Spreadsheet – Cross-Site Scripting

漏洞标题 CVE-2013-6281: WordPress Spreadsheet - Cross-Site Scripting 漏洞描述 WordPress Spreadsheet plugin contains a reflected cross-site scripting vulnerability in /dhtmlxspreads...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2013年4月16日 17:37
30
CVE-2022-34046: WAVLINK WN533A8 - Improper Access Control-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34046: WAVLINK WN533A8 – Improper Access Control

漏洞标题 CVE-2022-34046: WAVLINK WN533A8 - Improper Access Control 漏洞描述 WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain use...
Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞(CVE-2023-49070)-渗透云记 - 专注于网络安全与技术分享

Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞(CVE-2023-49070)

漏洞标题 Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞(CVE-2023-49070) 漏洞描述 Apache OFBiz是一个开源的企业资源规划(ERP)系统,提供了多种商业功能和模块。Apache OFBiz 在...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年2月13日 15:43
30
CVE-2024-1061: WordPress HTML5 Video Player - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2024-1061: WordPress HTML5 Video Player – SQL Injection

漏洞标题 CVE-2024-1061: WordPress HTML5 Video Player - SQL Injection 漏洞描述 WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can ex...
CVE-2024-4898: WordPress InstaWP Connect <= 0.1.0.38 - Unauthenticated User Creation-渗透云记 - 专注于网络安全与技术分享

CVE-2024-4898: WordPress InstaWP Connect <= 0.1.0.38 - Unauthenticated User Creation

漏洞标题 CVE-2024-4898: WordPress InstaWP Connect <= 0.1.0.38 - Unauthenticated User Creation 漏洞描述 The InstaWP Connect – 1-click WP Staging & Migration plugin for WordP...
CVE-2023-43654: PyTorch TorchServe SSRF-渗透云记 - 专注于网络安全与技术分享

CVE-2023-43654: PyTorch TorchServe SSRF

漏洞标题 CVE-2023-43654: PyTorch TorchServe SSRF 漏洞描述 TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper i...
CVE-2022-0288: WordPress Ad Inserter <2.7.10 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0288: WordPress Ad Inserter <2.7.10 - Cross-Site Scripting

漏洞标题 CVE-2022-0288: WordPress Ad Inserter <2.7.10 - Cross-Site Scripting 漏洞描述 WordPress Ad Inserter plugin before 2.7.10 contains a cross-site scripting vulnerability. I...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年8月23日 01:09
30
CVE-2023-32117: Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints-渗透云记 - 专注于网络安全与技术分享

CVE-2023-32117: Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints

漏洞标题 CVE-2023-32117: Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints 漏洞描述 The Integrate Google Drive plugin for WordPress is vulnerable t...
CVE-2021-27748: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2021-27748: IBM WebSphere HCL Digital Experience – Server-Side Request Forgery

漏洞标题 CVE-2021-27748: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery 漏洞描述 IBM WebSphere HCL Digital Experience is vulnerable to server-side request forge...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年11月23日 09:53
30
CVE-2025-2609: MagnusBilling Login Logs - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2025-2609: MagnusBilling Login Logs – Cross-Site Scripting

漏洞标题 CVE-2025-2609: MagnusBilling Login Logs - Cross-Site Scripting 漏洞描述 Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusB...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年3月15日 01:15
30
CVE-2022-0422: WordPress White Label CMS <2.2.9 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0422: WordPress White Label CMS <2.2.9 - Cross-Site Scripting

漏洞标题 CVE-2022-0422: WordPress White Label CMS <2.2.9 - Cross-Site Scripting 漏洞描述 WordPress White Label CMS plugin before 2.2.9 contains a reflected cross-site scripting ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年10月22日 14:42
30
CVE-2017-5868: OpenVPN Access Server 2.1.4 - CRLF Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2017-5868: OpenVPN Access Server 2.1.4 – CRLF Injection

漏洞标题 CVE-2017-5868: OpenVPN Access Server 2.1.4 - CRLF Injection 漏洞描述 CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attacke...
CVE-2024-2863: LG LED Assistant - Thumbnail Path Traversal File Upload-渗透云记 - 专注于网络安全与技术分享

CVE-2024-2863: LG LED Assistant – Thumbnail Path Traversal File Upload

漏洞标题 CVE-2024-2863: LG LED Assistant - Thumbnail Path Traversal File Upload 漏洞描述 A path traversal vulnerability exists in the endpoint handler for /api/thumbnail in Common....
CVE-2022-2551: WordPress Duplicator <1.4.7 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2022-2551: WordPress Duplicator <1.4.7 - Authentication Bypass

漏洞标题 CVE-2022-2551: WordPress Duplicator <1.4.7 - Authentication Bypass 漏洞描述 WordPress Duplicator plugin before 1.4.7 is susceptible to authentication bypass. The plugin...