漏洞库 第74页
此分类不是0day,只是做互联网poc收集,不对poc真实性、可用性做保证,不以poc无效等理由反馈退款
CVE-2025-27505: GeoServer - Missing Authorization on REST API Index-渗透云记 - 专注于网络安全与技术分享

CVE-2025-27505: GeoServer – Missing Authorization on REST API Index

漏洞标题 CVE-2025-27505: GeoServer - Missing Authorization on REST API Index 漏洞描述 GeoServer contains a missing authorization vulnerability that allows unauthorized access to th...
CVE-2025-30220: GeoServer WFS - XXE Processing Vulnerability-渗透云记 - 专注于网络安全与技术分享

CVE-2025-30220: GeoServer WFS – XXE Processing Vulnerability

漏洞标题 CVE-2025-30220: GeoServer WFS - XXE Processing Vulnerability 漏洞描述 GeoServer Web Feature Service (WFS) is vulnerable to an XML External Entity (XXE) processing attack d...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年6月22日 15:34
40
CVE-2021-40822: Geoserver - Server-Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2021-40822: Geoserver – Server-Side Request Forgery

漏洞标题 CVE-2021-40822: Geoserver - Server-Side Request Forgery 漏洞描述 GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows server-side request forgery via the option for s...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2021年10月28日 12:05
20
CVE-2022-24816: GeoServer <1.2.2 - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2022-24816: GeoServer <1.2.2 - Remote Code Execution

漏洞标题 CVE-2022-24816: GeoServer <1.2.2 - Remote Code Execution 漏洞描述 Programs run on GeoServer before 1.2.2 which use jt-jiffle and allow Jiffle script to be provided via ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年2月24日 18:33
30
CVE-2023-25157: GeoServer OGC Filter - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2023-25157: GeoServer OGC Filter – SQL Injection

漏洞标题 CVE-2023-25157: GeoServer OGC Filter - SQL Injection 漏洞描述 GeoServer is an open source software server written in Java that allows users to share and edit geospatial da...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2023年6月20日 07:01
30
CVE-2024-36401: GeoServer RCE in Evaluating Property Name Expressions-渗透云记 - 专注于网络安全与技术分享

CVE-2024-36401: GeoServer RCE in Evaluating Property Name Expressions

漏洞标题 CVE-2024-36401: GeoServer RCE in Evaluating Property Name Expressions 漏洞描述 In the GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer, multiple OGC reque...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2024年1月25日 13:20
30
CVE-2025-30220: GeoServer WFS - XXE Processing Vulnerability-渗透云记 - 专注于网络安全与技术分享

CVE-2025-30220: GeoServer WFS – XXE Processing Vulnerability

漏洞标题 CVE-2025-30220: GeoServer WFS - XXE Processing Vulnerability 漏洞描述 GeoServer Web Feature Service (WFS) is vulnerable to an XML External Entity (XXE) processing attack d...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年8月16日 12:14
60
CVE-2025-30220: GeoServer WFS - XXE Processing Vulnerability-渗透云记 - 专注于网络安全与技术分享

CVE-2025-30220: GeoServer WFS – XXE Processing Vulnerability

漏洞标题 CVE-2025-30220: GeoServer WFS - XXE Processing Vulnerability 漏洞描述 GeoServer Web Feature Service (WFS) is vulnerable to an XML External Entity (XXE) processing attack d...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2025年12月5日 14:58
40
(CVE-2024-22120) Zabbix服务器 命令注入漏洞-渗透云记 - 专注于网络安全与技术分享

(CVE-2024-22120) Zabbix服务器 命令注入漏洞

漏洞标题 (CVE-2024-22120) Zabbix服务器 命令注入漏洞 漏洞描述 (CVE-2024-22120) Zabbix服务器 命令注入漏洞 PoC代码 暂无
CVE-2016-10134: Zabbix - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2016-10134: Zabbix – SQL Injection

漏洞标题 CVE-2016-10134: Zabbix - SQL Injection 漏洞描述 Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids arra...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2016年7月20日 19:34
20
CVE-2019-17382: Zabbix <=4.4 - Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2019-17382: Zabbix <=4.4 - Authentication Bypass

漏洞标题 CVE-2019-17382: Zabbix <=4.4 - Authentication Bypass 漏洞描述 Zabbix through 4.4 is susceptible to an authentication bypass vulnerability via zabbix.php?action=dashboar...
CVE-2022-23131: Zabbix - SAML SSO Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2022-23131: Zabbix – SAML SSO Authentication Bypass

漏洞标题 CVE-2022-23131: Zabbix - SAML SSO Authentication Bypass 漏洞描述 When SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor b...
CVE-2022-23134: Zabbix Setup Configuration Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2022-23134: Zabbix Setup Configuration Authentication Bypass

漏洞标题 CVE-2022-23134: Zabbix Setup Configuration Authentication Bypass 漏洞描述 After the initial setup process, some steps of setup.php file are reachable not only by super-adm...
CVE-2022-26148: Grafana & Zabbix Integration - Credentials Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2022-26148: Grafana & Zabbix Integration – Credentials Disclosure

漏洞标题 CVE-2022-26148: Grafana & Zabbix Integration - Credentials Disclosure 漏洞描述 Grafana through 7.3.4, when integrated with Zabbix, contains a credential disclosure vul...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年12月29日 06:47
50
CVE-2016-10134: Zabbix - SQL Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2016-10134: Zabbix – SQL Injection

漏洞标题 CVE-2016-10134: Zabbix - SQL Injection 漏洞描述 Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids arra...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2016年10月25日 17:35
00
CVE-2022-23131: Zabbix - SAML SSO Authentication Bypass-渗透云记 - 专注于网络安全与技术分享

CVE-2022-23131: Zabbix – SAML SSO Authentication Bypass

漏洞标题 CVE-2022-23131: Zabbix - SAML SSO Authentication Bypass 漏洞描述 When SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor b...