漏洞描述
WhoDB < 0.45.0存在路径遍历漏洞，这使得未认证的攻击者能够访问主机系统上任意的 Sqlite3 数据库
WhoDB < 0.45.0存在路径遍历漏洞(CVE-2025-24786)
PoC代码
暂无相关漏洞推荐
- SolarWinds Web Help Desk 代码执行漏洞（CVE-2025-40536/CVE-2025-40551）
- POC CVE-2021-22017: vCenter Server - Improper Access Control
- POC CVE-2023-35708: MOVEit Transfer - SQL Injection
- POC CVE-2024-30490: ProfileGrid <= 5.7.8 - SQL Injection
- POC CVE-2025-10353: Melis Technology Melis Platform - Unrestricted File Upload & Remote Code Execution
- POC CVE-2022-31678: VMWare Cloud Foundation NSX-V - XML External Entity (XXE)
- POC CVE-2024-37259: WP Extended < 3.0.0 - Stored Cross-Site Scripting
- POC CVE-2024-6671: WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass
- POC CVE-2024-8911: LatePoint <= 5.0.11 - SQL Injection
- POC CVE-2025-54068: Laravel Livewire v3 - Remote Command Execution
- POC CVE-2026-22812: OpenCode < 1.0.216 - Unauthenticated Remote Code Execution
- POC CVE-2019-13608: Citrix StoreFront Server - XML External Entity
- POC CVE-2021-24139: 10Web Photo Gallery < 1.5.55 - SQL Injection