Vi Vulnerabilities
1000 vulnerabilities related to Vi
- PoC2026-08-19CVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution
- PoC2026-08-18solarview-compact-pow-xss: SolarView Compact 6.00 - 'pow' Cross-Site Scripting
- PoC2026-08-18solarview-compact-time-begin-xss: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting
- PoC2026-08-16net-vision-default-login: Net Vision UPS Monitor - Default Login
- 2026-08-07ServiceNow-AI-Platform /assessment_thanks.do 代码执行漏洞（CVE-2026-6875）
- PoC2026-07-31CVE-2021-47795: GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting
- PoC2026-07-31CVE-2026-24207: NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass
- PoC2026-07-31CVE-2026-6875: ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE
- 2026-07-24NukeViet /index.php 服务器端请求伪造漏洞（CVE-2026-55372）
- 2026-07-06关于NC系统BapAnaRepDefService的sql注入漏洞的安全通告
- PoC2026-06-17laravel-ignition-log-viewer: Laravel Ignition - Log Viewer Information Disclosure
- 2026-06-12IEI 威強電工業電腦｜iVEC-IEI Virtualization Edge Computer - 存在4個漏洞
- 2026-05-29金財通商務科技｜Service Center - Insecure Direct Object Reference
- 2026-05-29Vite /.env?raw?? 文件读取漏洞（CVE-2026-39364）
- 2026-05-22AVideo /plugin/API/get.json.php 文件包含漏洞（CVE-2026-33513）
- 2026-05-22HIKVISION 综合安防管理平台 /artemis-portal/artemis/env 信息泄露漏洞
- 2026-05-22WWBN AVideo /objects/plugins.json.php 信息泄露漏洞 （CVE-2026-43885）
- 2026-05-15short-video-maker /api/tmp 文件读取漏洞（CVE-2026-8115）
- 2026-05-12关于NC系统IMsgCenterWebService的sql注入漏洞的安全通告
- 2026-05-12关于NC系统IObaExcelService的sql注入漏洞的安全通告
- PoC2026-05-09CVE-2024-26291: Avid NEXIS Agent - Arbitrary File Read
- PoC2026-05-09CVE-2025-32395: Vite - Path Traversal
- PoC2026-04-16CVE-2026-30824: Flowise - NVIDIA NIM Endpoints Missing Authentication
- 2026-04-14Vite WebSocket 任意文件读取漏洞（CVE-2026-39363）
- 2026-04-10Vite Websocket 文件读取漏洞（CVE-2026-39363）
- 2026-04-10Vite Dev Server /node_modules/.vite/deps 文件读取漏洞 （CVE-2026-39365）
- 2026-04-10Alfresco Content Services /alfresco/service/api/login 默认口令漏洞
- PoC2026-04-09CVE-2023-34092: Vite Dev Server - Information Exposure
- PoC2026-04-09CVE-2023-40924: SolarView Compact < 6.00 - Directory Traversal
- PoC2026-04-09CVE-2023-49293: Vite dev server - Cross-Site Scripting
- PoC2026-04-09CVE-2025-46565: Vite Dev Server - Information Exposure
- PoC2026-04-09CVE-2025-5947: Service Finder Bookings - Authentication Bypass
- PoC2026-04-09CVE-2026-33478: AVideo <= 26.0 - WWBN AVideo - Remote Code Execution
- PoC2026-04-09CVE-2026-39364: Vite Dev Server - Directory Traversal
- PoC2026-04-09CVE-2026-39365: Vite Dev Server - Path Traversal in Optimized Deps .map Handling
- PoC2026-04-09CVE-2026-4020: Gravity SMTP WordPress Plugin - Sensitive Information Exposure
- PoC2026-04-09revive-adserver-installer: Revive Adserver - Exposed Installer
- 2026-04-01Vim 代码执行漏洞(CVE-2026-34714)
- 2026-03-27AVideo /plugin/Live/test.php 服务器端请求伪造漏洞（CVE-2026-33502）
- 2026-03-27Vite /.env/%5C 信息泄露漏洞（CVE-2025-62522）
- PoC2026-03-25CVE-2023-6030: LogDash Activity Log <= 1.1.3 - SQL Injection
- PoC2026-03-25CVE-2026-1357: WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload
- 2026-03-24Vite 信息泄露漏洞（CVE-2025-62522）
- 2026-03-23叡揚資訊｜Vitals ESP - 存在2個漏洞
- PoC2026-03-13Navidrome Subsonic API /rest/getPlaylists 权限绕过漏洞（CVE-2025-27112）
- 2026-03-09Ilevia EVE X1 Server /ajax/php/auto_build_db.php 命令执行漏洞
- 2026-03-09Tosei Self-service Washing Machine /cgi-bin/monitor.php 命令执行漏洞（CVE-2026-2944）
- 2026-03-09Tosei Self-service Washing Machine /cgi-bin/downloader.php 目录遍历漏洞（CVE-2024-43022）
- 2026-03-09Tosei Self-service Washing Machine /cgi-bin/view_data.php 文件读取漏洞
- PoC2026-02-24CVE-2024-13625: Tube Video Ads Lite - Reflected XSS
- PoC2026-02-24CVE-2025-1232: Site Reviews < 7.2.5 - Unauthenticated Stored XSS
- PoC2026-02-24sap-getenvironment-disclosure: SAPControl GetEnvironment - Disclosure
- PoC2026-02-03CVE-2022-28987: Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration
- 2026-01-30Avid Nexis Agent / 目录遍历漏洞（CVE-2024-26293）
- 2026-01-30Avid Nexis Agent / 目录遍历漏洞（CVE-2024-26293）
- PoC2026-01-24servicestack-requestlogs: ServiceStack Request Logs - Unauthenticated Access
- PoC2026-01-24gerrit-account-enum: Gerrit Code Review - Account Enumeration
- 2026-01-23Avid Nexis Agent /logs 文件读取漏洞（CVE-2024-26291）
- 2026-01-23kkFileView /getCorsFile 服务器端请求伪造漏洞
- 2026-01-23Avid Nexis Agent /logs 文件读取漏洞（CVE-2024-26291）
- 2026-01-23kkFileView /getCorsFile 服务器端请求伪造漏洞
- PoC2026-01-16vscode-mcp-json: Visual Studio Code MCP Configuration ("mcp.json") Exposure
- PoC2026-01-16apache-spark-env: Apache Spark Environment - Exposure
- PoC2026-01-16wp-advanced-responsive-video-embedder-fpd: WordPress Advanced Responsive Video Embedder - Full Path Disclosure
- PoC2026-01-16wp-pagenavi-fpd: WordPress WP-PageNavi - Full Path Disclosure
- PoC2026-01-16wp-gravity-forms-log-disclosure: WordPress Gravity Forms - Log File Disclosure
- 2026-01-12Hpe Oneview 未授权 命令注入漏洞
- PoC2026-01-08CVE-2025-37164: HPE OneView - Remote Code Execution
- PoC2026-01-08CVE-2025-56266: Avigilon ACM - Host Header Injection
- PoC2026-01-08CVE-2025-62522: Vite - Information Disclosure
- PoC2026-01-08vscode-slnx-sqlite-disclosure: Visual Studio Code - Slnx.SQLite File Disclosure
- PoC2026-01-08wp-pagenavi-fpd: WordPress WP-PageNavi - Full Path Disclosure
- 2026-01-05ONVIF 默认口令漏洞
- 2026-01-05Ilevia EVE X1 Server /ajax/php/leaf_replace_device.php 命令执行漏洞
- 2026-01-05Ilevia EVE X1 Server /ajax/history/get_history_data_odic.php 命令执行漏洞
- 2026-01-05ONVIF 默认口令漏洞
- 2026-01-05Ilevia EVE X1 Server /ajax/php/leaf_replace_device.php 命令执行漏洞
- 2026-01-05Ilevia EVE X1 Server /ajax/history/get_history_data_odic.php 命令执行漏洞
- 2025-12-19MSService 服务 /base/WCFDBService/mex SQL 注入漏洞
- 2025-12-19(CVE-2025-34433) AVideo 安装盐预测远程代码执行漏洞
- 2025-12-19MSService 服务 /base/WCFDBService/mex SQL 注入漏洞
- 2025-12-18Wwbn Avideo任意重定向漏洞(CVE-2025-34440)
- 2025-12-18Wwbn Avideo敏感系统信息暴露给未经授权的控制领域漏洞(CVE-2025-34442)
- 2025-12-18Wwbn Avideo权限绕过漏洞(CVE-2025-34438)
- 2025-12-18Wwbn Avideo任意重定向漏洞(CVE-2025-34439)
- 2025-12-18Wwbn Avideo向未经授权的行为者暴露私人个人信息漏洞(CVE-2025-34441)
- 2025-12-18Wwbn Avideo权限绕过漏洞(CVE-2025-34437)
- 2025-12-18Wwbn Avideo权限绕过漏洞(CVE-2025-34436)
- 2025-12-18Wwbn Avideo权限绕过漏洞(CVE-2025-34435)
- 2025-12-18Wwbn Avideo缺少关键功能的身份验证漏洞(CVE-2025-34434)
- 2025-12-18Apache Airflow Providers Edge3 设计缺陷漏洞
- 2025-12-18Apache Airflow Providers Edge3 设计缺陷漏洞
- PoC2025-12-12CVE-2021-37415: Zoho ManageEngine ServiceDesk Plus - Authentication Bypass
- 2025-12-12Ilevia EVE X1 Server /ajax/php/get_file_content.php 文件读取漏洞（CVE-2025-34518）
- 2025-12-12Ilevia EVE X1 Server /ajax/php/leaf_search.php 命令执行漏洞（CVE-2025-14276）
- 2025-12-12Ilevia EVE X1 Server /ajax/php/get_file_content.php 文件读取漏洞（CVE-2025-34518）
- 2025-12-12Ilevia EVE X1 Server /ajax/php/leaf_search.php 命令执行漏洞（CVE-2025-14276）
- 2025-12-09Ilevia EVE X1 Server存在信息泄露漏洞
- 2025-12-09Ilevia EVE X1 Server存在远程命令执行
- 2025-12-09Ilevia EVE X1 Server存在远程命令执行
- 2025-12-05友加畅捷管理系统 Service/ms_DBLis 信息泄露漏洞
- 2025-12-05GeoVision /DateSetting.cgi 命令执行漏洞（CVE-2024-11120）
- 2025-12-05友加畅捷管理系统 Service/ms_DBLis 信息泄露漏洞
- 2025-12-05GeoVision /DateSetting.cgi 命令执行漏洞（CVE-2024-11120）
- PoC2025-12-02cluster-trino-admin-login: Cluster Overview Trino - Admin Login
- PoC2025-12-02unauth-supervisor-dashboard: Unauth Supervisor Dashboard - Detect
- 2025-11-28ilevia EVE X1 Server /ajax/php/ping.php 命令执行漏洞（CVE-2025-60738）
- 2025-11-28Vite /.env/. 目录遍历漏洞（CVE-2025-46565）
- 2025-11-28ilevia EVE X1 Server /ajax/php/ping.php 命令执行漏洞（CVE-2025-60738）
- 2025-11-28Vite /.env/. 目录遍历漏洞（CVE-2025-46565）
- PoC2025-11-21CVE-2021-34427: Eclipse BIRT Viewer - Remote Code Execution
- PoC2025-11-21CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass
- 2025-11-21ilevia EVE X1 Server 远程命令执行 CVE-2025-60738
- 2025-11-21（CVE-2025-60738）Ilevia EVE X1 Server ping.php IP参数过滤不足导致远程代码执行漏洞
- PoC2025-11-11CVE-2025-31486: Vite server.fs.deny Bypass - Local File Inclusion
- PoC2025-11-07CVE-2021-41419: QVIS NVR/DVR - Remote Code Execution
- 2025-10-22（CVE-2025-62522）Vite开发服务器Windows环境下文件泄露漏洞
- 2025-10-13Vite 文件读取权限绕过(CVE-2025-46565)
- 2025-10-10（CVE-2025-36604）Dell Unity OS命令注入漏洞
- 2025-10-01（CVE-2025-23293）NVIDIA委托许可服务授权操作导致信息泄露漏洞
- 2025-09-28NVIDIA Triton Inference Server 未授权 命令注入漏洞
- 2025-09-19万户OA freemarkeService 远程命令执行漏洞
- 2025-09-18QNAP VioStor 路径遍历漏洞
- 2025-09-12Ilevia EVE X1 Server /login/login.php 权限绕过漏洞
- 2025-09-12Ilevia EVE X1 Server /login/login.php 权限绕过漏洞
- 2025-09-09(CVE-2025-58751) Vite server.fs 安全绕过漏洞
- PoC2025-09-05用友NC IMsgCenterWebService 命令执行漏洞
- 2025-09-05Ilevia EVE X1 Server /ajax/php/dbcheck.php 文件读取漏洞
- 2025-09-05Ilevia EVE X1 服务器 login.php 身份认证绕过漏洞
- 2025-09-05用友NC IMsgCenterWebService 命令执行漏洞
- 2025-09-05Ilevia EVE X1 Server /ajax/php/dbcheck.php 文件读取漏洞
- 2025-09-01trilithic-viewpoint-default-password: Trilithic Viewpoint Default Login
- 2025-09-01consul-service-rce: Consul Service RCE
- 2025-09-01e-weaver-eoffice-webservice-upload-fileupload: E-Weaver EOffice webservice upload file upload
- 2025-09-01esafenet-cdgserver3-autosignservice1-rce: 亿赛通电子文档系统 AutoSignService1 RCE
- 2025-09-01esafenet-cdgserver3-fileauditservice-rce: 亿赛通电子文档系统 FileAuditService RCE
- 2025-09-01hikvision-center-fastjson-rce: 海康威视综合安防-运行管理中心-Fastjson-远程命令执行漏洞
- 2025-09-01hikvision-files-upload: Hikvision Files Upload
- 2025-09-01idocview-cmd-rce: I Doc View cmd.json命令执行漏洞
- 2025-09-01spon-ip-intercom-ping-rce: Hikvision SPON IP网络对讲广播系统存在命令执行漏洞
- 2025-08-29Ilevia EVE X1 Server /ajax/php/login.php 命令执行漏洞
- 2025-08-29Ilevia EVE X1 Server /80-history/eve-server.log 信息泄露漏洞
- 2025-08-29Ilevia EVE X1 Server /ajax/php/login.php 命令执行漏洞
- 2025-08-29Ilevia EVE X1 Server /80-history/eve-server.log 信息泄露漏洞
- 2025-08-28Network Technologies Inc ENVIROMUX存在默认口令
- 2025-08-21VICIdial /VERM/VERM_AJAX_functions.php SQL 注入漏洞（CVE-2024-8503）
- 2025-08-21VICIdial /VERM/VERM_AJAX_functions.php SQL 注入漏洞（CVE-2024-8503）
- 2025-08-20Ilevia EVE X1 Server 存在信息泄露漏洞
- 2025-08-15ilevia EVE X1 Server get_file_content 接口存在任意文件读取漏洞
- 2025-08-10（CVE-2025-8772）Vinades NukeViet 4.5.06 Module Handler组件文件处理服务器端请求伪造漏洞
- 2025-08-07InvisionCommunity存在代码注入漏洞(CVE-2025-47916)
- 2025-08-06Ilevia EVE X1 Server存在任意文件读取漏洞
- 2025-08-06Ilevia EVE X1 Server存在远程命令执行
- 2025-08-06(CVE-2025-21024) Smart View在Android 16之前版本中因使用隐式意图导致敏感信息泄露漏洞
- 2025-08-06（CVE-2025-21016）Android PkgPredictorService访问控制漏洞
- 2025-08-04Richmail 邮件系统openapiservice 存在任意文件上传漏洞
- PoC2025-08-01CVE-2024-12356: Privileged Remote Access & Remote Support - Command Injection
- PoC2025-08-01CVE-2010-2918: Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion
- PoC2025-08-01CVE-2013-4117: WordPress Plugin Category Grid View Gallery 2.3.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2014-4536: Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting
- PoC2025-08-01CVE-2014-4539: Movies <= 0.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2015-2807: Navis DocumentCloud <0.1.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2015-2863: Kaseya Virtual System Administrator - Open Redirect
- PoC2025-08-01CVE-2015-4455: WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload
- PoC2025-08-01CVE-2015-5354: Novius OS 5.0.1-elche - Open Redirect
- PoC2025-08-01CVE-2016-1000134: WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2016-1000135: WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2016-1000139: WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting
- PoC2025-08-01CVE-2016-1000148: WordPress S3 Video <=0.983 - Cross-Site Scripting
- PoC2025-08-01CVE-2016-10367: Opsview Monitor Pro - Local File Inclusion
- PoC2025-08-01CVE-2016-10368: Opsview Monitor Pro - Open Redirect
- PoC2025-08-01CVE-2017-11512: ManageEngine ServiceDesk 9.3.9328 - Arbitrary File Retrieval
- PoC2025-08-01CVE-2017-18537: Visitors Online by BestWebSoft < 1.0.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18562: Error Log Viewer by BestWebSoft < 1.0.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-7921: Hikvision - Authentication Bypass
- PoC2025-08-01CVE-2018-10562: Dasan GPON Devices - Remote Code Execution
- PoC2025-08-01CVE-2018-10818: LG NAS Devices - Remote Code Execution
- PoC2025-08-01CVE-2018-11231: Opencart Divido - Sql Injection
- PoC2025-08-01CVE-2018-1207: Dell iDRAC7/8 Devices - Remote Code Injection
- PoC2025-08-01CVE-2019-12581: Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting
- PoC2025-08-01CVE-2019-16931: WordPress Visualizer <3.3.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2019-16932: Visualizer <3.3.1 - Blind Server-Side Request Forgery
- PoC2025-08-01CVE-2019-5434: Revive Adserver 4.2 - Remote Code Execution
- PoC2025-08-01CVE-2020-0618: Microsoft SQL Server Reporting Services - Remote Code Execution
- PoC2025-08-01CVE-2020-15415: DrayTek Vigor - Command Injection
- PoC2025-08-01CVE-2020-27361: Akkadian Provisioning Manager 4.50.02 - Sensitive Information Disclosure
- PoC2025-08-01CVE-2020-28351: Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting
- PoC2025-08-01CVE-2020-8115: Revive Adserver <=5.0.3 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-9047: exacqVision Web Service - Remote Code Execution
- PoC2025-08-01CVE-2020-9376: D-Link DIR-610 Devices - Information Disclosure
- PoC2025-08-01CVE-2021-20123: Draytek VigorConnect 1.6.0-B - Local File Inclusion
- PoC2025-08-01CVE-2021-20124: Draytek VigorConnect 6.0-B3 - Local File Inclusion
- PoC2025-08-01CVE-2021-21978: VMware View Planner <4.6 SP1- Remote Code Execution
- PoC2025-08-01CVE-2021-22873: Revive Adserver <5.1.0 - Open Redirect
- PoC2025-08-01CVE-2021-24498: WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-24750: WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection
- PoC2025-08-01CVE-2021-24934: Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-24970: WordPress All-In-One Video Gallery <2.5.0 - Local File Inclusion
- PoC2025-08-01CVE-2021-28149: Hongdian H8922 3.0.5 Devices - Local File Inclusion
- PoC2025-08-01CVE-2021-28854: VICIdial Sensitive Information Disclosure
- PoC2025-08-01CVE-2021-31581: Akkadian Provisioning Manager - Information Disclosure
- PoC2025-08-01CVE-2021-33904: Accela Civic Platform <=21.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-34370: Accela Civic Platform <=21.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-36260: Hikvision IP camera/NVR - Remote Command Execution
- PoC2025-08-01CVE-2021-36356: Kramer VIAware - Remote Code Execution
- PoC2025-08-01CVE-2021-37416: Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-37589: Virtua Software Cobranca <12R - Blind SQL Injection
- PoC2025-08-01CVE-2021-39350: FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting
- PoC2025-08-01CVE-2021-40539: Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution
- PoC2025-08-01CVE-2021-40870: Aviatrix Controller 6.x before 6.5-1804.1922 - Remote Command Execution
- PoC2025-08-01CVE-2021-42071: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection
- PoC2025-08-01CVE-2021-43734: kkFileview v4.0.0 - Local File Inclusion
- PoC2025-08-01CVE-2021-44077: Zoho ManageEngine ServiceDesk Plus - Remote Code Execution
- PoC2025-08-01CVE-2021-44529: Ivanti EPM Cloud Services Appliance Code Injection
- PoC2025-08-01CVE-2021-44848: Thinfinity VirtualUI User Enumeration
- PoC2025-08-01CVE-2021-46068: Vehicle Service Management System - Stored Cross-Site Scripting
- PoC2025-08-01CVE-2021-46069: Vehicle Service Management System 1.0 - Stored Cross Site Scripting
- PoC2025-08-01CVE-2021-46071: ehicle Service Management System 1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-46072: Vehicle Service Management System 1.0 - Stored Cross Site Scripting
- PoC2025-08-01CVE-2021-46073: Vehicle Service Management System 1.0 - Cross Site Scripting
- PoC2025-08-01CVE-2022-0140: WordPress Visual Form Builder <3.0.8 - Information Disclosure
- PoC2025-08-01CVE-2022-0434: WordPress Page Views Count <2.4.15 - SQL Injection
- PoC2025-08-01CVE-2022-0786: WordPress KiviCare <2.3.9 - SQL Injection
- PoC2025-08-01CVE-2022-0826: WordPress WP Video Gallery <=1.7.1 - SQL Injection
- PoC2025-08-01CVE-2022-1026: Kyocera Net View Address Book Exposure
- PoC2025-08-01CVE-2022-1392: WordPress Videos sync PDF <=1.7.4 - Local File Inclusion
- PoC2025-08-01CVE-2022-22242: Juniper Web Device Manager - Cross-Site Scripting
- PoC2025-08-01CVE-2022-23178: Crestron Device - Credentials Disclosure
- PoC2025-08-01CVE-2022-24627: AudioCodes Device Manager Express - SQL Injection
- PoC2025-08-01CVE-2022-24681: ManageEngine ADSelfService Plus <6121 - Stored Cross-Site Scripting
- PoC2025-08-01CVE-2022-24900: Piano LED Visualizer 1.3 - Local File Inclusion
- PoC2025-08-01CVE-2022-2633: All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery
- PoC2025-08-01CVE-2022-2756: Kavita <0.5.4.1 - Server-Side Request Forgery
- PoC2025-08-01CVE-2022-28117: Navigate CMS 2.9.4 - Server-Side Request Forgery
- PoC2025-08-01CVE-2022-2863: WordPress WPvivid Backup <0.9.76 - Local File Inclusion
- PoC2025-08-01CVE-2022-29298: SolarView Compact 6.00 - Local File Inclusion
- PoC2025-08-01CVE-2022-29299: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting
- PoC2025-08-01CVE-2022-29301: SolarView Compact 6.00 - 'pow' Cross-Site Scripting
- PoC2025-08-01CVE-2022-29303: SolarView Compact 6.00 - OS Command Injection
- PoC2025-08-01CVE-2022-29349: kkFileView 4.0.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-31373: SolarView Compact 6.00 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-32770: WWBN AVideo 11.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-32771: WWBN AVideo 11.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-32772: WWBN AVideo 11.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-33119: NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-33965: WordPress Visitor Statistics <=5.7 - SQL Injection
- PoC2025-08-01CVE-2022-35151: kkFileView 4.1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-38463: ServiceNow - Cross-Site Scripting
- PoC2025-08-01CVE-2022-39048: ServiceNow - Cross-site Scripting
- PoC2025-08-01CVE-2022-40879: kkFileView 4.1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-40881: SolarView 6.00 - Remote Command Execution
- PoC2025-08-01CVE-2022-43140: kkFileView 4.1.0 - Server-Side Request Forgery
- PoC2025-08-01CVE-2022-45933: KubeView <=0.1.31 - Information Disclosure
- PoC2025-08-01CVE-2022-46934: kkFileView 4.1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-0600: WP Visitor Statistics (Real Time Traffic) < 6.9 - SQL Injection
- PoC2025-08-01CVE-2023-1408: Video List Manager <= 1.7 - SQL Injection
- PoC2025-08-01CVE-2023-23333: SolarView Compact 6.00 - OS Command Injection
- PoC2025-08-01CVE-2023-2624: KiviCare WordPress Plugin - Cross-Site Scripting
- PoC2025-08-01CVE-2023-26255: STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion
- PoC2025-08-01CVE-2023-26256: STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion
- PoC2025-08-01CVE-2023-27482: Home Assistant Supervisor - Authentication Bypass
- PoC2025-08-01CVE-2023-29919: SolarView Compact <= 6.00 - Local File Inclusion
- PoC2025-08-01CVE-2023-30868: Tree Page View Plugin < 1.6.7 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-34124: SonicWall GMS and Analytics Web Services - Shell Injection
- PoC2025-08-01CVE-2023-36844: Juniper Devices - Remote Code Execution
- PoC2025-08-01CVE-2023-3722: Avaya Aura Device Services - OS Command Injection
- PoC2025-08-01CVE-2023-38040: Revive Adserver 5.4.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-4113: PHPJabbers Service Booking Script 1.0 - Cross Site Scripting
- PoC2025-08-01CVE-2023-45852: Viessmann Vitogate 300 - Remote Code Execution
- PoC2025-08-01CVE-2023-48728: WWBN AVideo 11.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-5074: D-Link D-View 8 v2.0.1.28 - Authentication Bypass
- PoC2025-08-01CVE-2023-5222: Viessmann Vitogate 300 - Hardcoded Password
- PoC2025-08-01CVE-2023-6895: Hikvision IP ping.php - Command Execution
- PoC2025-08-01CVE-2024-1061: WordPress HTML5 Video Player - SQL Injection
- PoC2025-08-01CVE-2024-11728: KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection
- PoC2025-08-01CVE-2024-12849: Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read
- PoC2025-08-01CVE-2024-12987: DrayTek Vigor - Command Injection
- PoC2025-08-01CVE-2024-13624: WordPress WPMovieLibrary Plugin <= 2.1.4.8 - Cross-Site Scripting
- PoC2025-08-01CVE-2024-3850: Uniview NVR301-04S2-P4 - Cross-Site Scripting
- PoC2025-08-01CVE-2024-38653: Ivanti Avalanche SmartDeviceServer - XML External Entity
- PoC2025-08-01CVE-2024-40422: Devika v1 - Path Traversal
- PoC2025-08-01CVE-2024-45488: SafeGuard for Privileged Passwords < 7.5.2 - Authentication Bypass
- PoC2025-08-01CVE-2024-47062: Navidrome < 0.53.0 - Authenticated SQL Injection
- PoC2025-08-01CVE-2024-4879: ServiceNow UI Macros - Template Injection
- PoC2025-08-01CVE-2024-50603: Aviatrix Controller - Remote Code Execution
- PoC2025-08-01CVE-2024-5217: ServiceNow - Incomplete Input Validation
- PoC2025-08-01CVE-2024-5334: Devika - Local File Inclusion
- PoC2025-08-01CVE-2024-5522: WordPress HTML5 Video Player < 2.5.27 - SQL Injection
- PoC2025-08-01CVE-2024-6926: Viral Signup <= 2.1 - SQL Injection
- PoC2025-08-01CVE-2024-7339: TVT DVR Sensitive Device - Information Disclosure
- PoC2025-08-01CVE-2024-8503: VICIdial - SQL Injection
- PoC2025-08-01CVE-2024-8963: Ivanti Cloud Services Appliance - Path Traversal
- PoC2025-08-01CVE-2025-24963: Vitest Browser Mode - Local File Read
- PoC2025-08-01CVE-2025-27112: Navidrome <=0.54.5 - Authentication Bypass in Subsonic API
- PoC2025-08-01CVE-2025-29085: Vipshop Saturn Console <= 3.5.1 - SQL Injection via ClusterKey Component
- PoC2025-08-01CVE-2025-30208: Vite - Arbitrary File Read
- PoC2025-08-01CVE-2025-31125: Vite Development Server - Path Traversal
- PoC2025-08-01CVE-2025-31324: SAP NetWeaver Visual Composer Metadata Uploader - Deserialization
- PoC2025-08-01CVE-2025-34035: EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution
- PoC2025-08-01CVE-2025-44148: MailEnable Mail Service < v10 - Cross-Site Scripting
- PoC2025-08-01CVE-2025-47916: Invision Community <=5.0.6 Unauthenticated RCE via Template Injection
- PoC2025-08-01CVE-2025-54125: XWiki XML View - Sensitive Information Exposure
- PoC2025-08-01CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload
- PoC2025-08-01CVE-2017-11610: Supervisor RCE
- PoC2025-08-01CVE-2017-7921: Hikvision CVE-2017-7921
- PoC2025-08-01CVE-2018-11686: FlexPaper PHP Publish Service RCE
- PoC2025-08-01CVE-2021-33044: Dahua IPC/VTH/VTO devices Authentication Bypass
- PoC2025-08-01CVE-2021-36260: Hikvision IP camera/NVR - Unauthenticated RCE
- PoC2025-08-01ack-cluster-auditing-disable: Cluster Auditing with Simple Log Service - Disabled
- PoC2025-08-01multi-region-logging-disabled: Global Service (Multi-Region) Logging - Disabled
- PoC2025-08-01CVE-2021-43734: kkFileView getCorsFile 任意文件读取漏洞
- PoC2025-08-01sse-smk-disabled: Server-Side Encryption with Service Managed Key - Disabled
- PoC2025-08-01CVE-2022-0434: WordPress Page Views Count <2.4.15 - SQL Injection
- PoC2025-08-01CVE-2022-23178: Crestron Device - Credentials Disclosure
- PoC2025-08-01cloudfront-viewer-policy: CloudFront Viewer Protocol Policy
- PoC2025-08-01CVE-2022-29303: SolarView Compact conf_mail.php 远程命令执行漏洞
- PoC2025-08-01ec2-imdsv2: Enforce IMDSv2 on EC2 Instances
- PoC2025-08-01CVE-2022-40881: SolarView network_test.php 远程命令执行漏洞
- PoC2025-08-01CVE-2022-45933: KubeView 未授权访问漏洞
- PoC2025-08-01CVE-2023-23333: SolarView downloader.php rce
- PoC2025-08-01CVE-2023-26256: STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion
- PoC2025-08-01CVE-2023-29919: SolarView Compact <= 6.00 - Local File Inclusion
- PoC2025-08-01iam-full-admin-privileges: Overly Permissive IAM Policies
- PoC2025-08-01CVE-2023-5074: D-Link D-View 8 v2.0.1.28 - Authentication Bypass
- PoC2025-08-01CVE-2024-1061: WordPress HTML5 Video Player SQL注入
- PoC2025-08-01CVE-2025-30208: Vite 任意文件读取漏洞
- PoC2025-08-01azure-vm-deallocate-unalerted: Azure Virtual Machine Deallocate Alert Not Configured
- PoC2025-08-01azure-vm-delete-unalerted: Azure Virtual Machine Delete Alert Not Configured
- PoC2025-08-01azure-vm-poweroff-unalerted: Azure Virtual Machine Power Off Alert Not Configured
- PoC2025-08-01azure-openai-managed-identity-not-used: Azure OpenAI Service Instance Managed Identity Not Used
- PoC2025-08-01azure-appservice-always-on-disabled: Azure App Service Always On Disabled
- PoC2025-08-01azure-appservice-auth-disabled: Azure App Service Authentication Not Enabled
- PoC2025-08-01azure-appservice-backup-not-enabled: Azure App Service Automated Backup Not Configured
- PoC2025-08-01azure-appservice-backup-retention-missing: Azure App Service Backup Retention Not Configured
- PoC2025-08-01azure-appservice-client-cert-disabled: Azure App Service Client Certificate Not Required
- PoC2025-08-01azure-appservice-entra-id-missing: Azure App Service Microsoft Entra ID Not Configured
- PoC2025-08-01azure-appservice-ftp-deployment-disabled: Azure App Service Plain FTP Deployment Disabled
- PoC2025-08-01azure-appservice-ftps-only-not-enabled: Azure App Service FTPS-Only Access Not Enabled
- PoC2025-08-01exacqvision-default-login: ExacqVision Default Login
- PoC2025-08-01azure-appservice-http2-not-enabled: Azure App Service HTTP/2 Not Enabled
- PoC2025-08-01azure-appservice-https-only-not-enforced: Azure App Service HTTPS-Only Not Enforced
- PoC2025-08-01exacqvision-default-password: ExacqVision Default Login
- PoC2025-08-01azure-appservice-insights-not-enabled: Azure App Service Application Insights Not Enabled
- PoC2025-08-01azure-appservice-remote-debugging-enabled: Azure App Service Remote Debugging Enabled
- PoC2025-08-01azure-appservice-tls-latest-version-missing: Azure App Service TLS Latest Version Not Configured
- PoC2025-08-01hikvision-intercom-service-default-password: Hikvision Intercom Service Default Password
- PoC2025-08-01azure-log-profile-all-activities: Azure Log Profile Missing Critical Activity Categories
- PoC2025-08-01azure-search-service-managed-identity-disabled: Azure Search Service Managed Identity Not Enabled
- PoC2025-08-01azure-defender-auto-provisioning-disabled: Azure Defender for Cloud Automatic Provisioning Disabled
- PoC2025-08-01azure-servicebus-public-access-disabled: Azure Service Bus Public Network Access Disabled
- PoC2025-08-01azure-servicebus-tls-version-outdated: Azure Service Bus Namespace TLS Version Not Latest
- PoC2025-08-01azure-blob-service-logging-disabled: Azure Storage Blob Service Logging Not Enabled
- PoC2025-08-01travis-ci-disclosure: Travis CI Disclosure
- PoC2025-08-01azure-storage-static-website-review: Azure Storage Static Website Configuration Review
- PoC2025-08-01jira-service-desk-signup: Jira Service Desk Signup
- PoC2025-08-01azure-vmss-empty-unattached: Azure Virtual Machine Scale Sets Empty and Unattached
- PoC2025-08-01gcloud-api-keys-inactive-services: API Keys Should Only Exist for Active Services
- PoC2025-08-01angjie-crm-rptviewer-ssrf: 昂捷CRM-RptViewer.aspx存在SSRF漏洞
- PoC2025-08-01avideo-install: AVideo Installer - Detect
- PoC2025-08-01gcloud-vm-default-service-account-full-access: VM Instance Using Default Service Account with Full API Access
- PoC2025-08-01gcloud-vm-default-service-account: VM Instance Using Default Service Account
- PoC2025-08-01gcloud-gke-default-service-account: GKE Clusters Using Default Service Account
- PoC2025-08-01gcloud-iam-service-roles-project-level: Service Account Roles at Project Level
- PoC2025-08-01gcloud-service-account-admin-restriction: Restrict Administrator Access for Service Accounts
- PoC2025-08-01gcloud-service-account-user-keys: User-Managed Service Account Keys Found
- PoC2025-08-01gcloud-iam-least-privilege-nat: Least Privilege Access for Cloud NAT Management
- PoC2025-08-01gcloud-org-service-account-creation: Service Account Creation Not Disabled
- PoC2025-08-01gcloud-org-service-account-key-creation: Service Account Key Creation Not Disabled
- PoC2025-08-01gcloud-org-service-account-key-upload: Service Account Key Upload Not Disabled
- PoC2025-08-01gcloud-run-services-user-labels-missing: Missing User-Defined Labels in Cloud Run Services
- PoC2025-08-01gcloud-vpc-service-controls-not-configured: Use VPC Service Controls for Cloud Storage Buckets
- PoC2025-08-01gcloud-vpc-private-service-connect: Private Service Connect Endpoints Not Configured
- PoC2025-08-01glodon-linkworks-gwgdwebservice-sqli: 广联达 Linkworks GWGdWebService SQL 注入
- PoC2025-08-01glodon-linkworks-Service.asmx-disclosure: 广联达oa Linkworks Service.asmx 敏感信息泄露
- PoC2025-08-01k8s-allow-privilege-escalation-set: Containers run with allowPrivilegeEscalation enabled
- PoC2025-08-01hanming-video-conferencing-file-read: Hanming Video Conferencing File Read
- PoC2025-08-01hikvision-anfang-files-fileupload: HiKVISION 综合安防管理平台 files 任意文件上传
- PoC2025-08-01hikvision-anfang-report-fileupload-2: HiKVISION 综合安防管理平台 report 任意文件上传
- PoC2025-08-01hikvision-anfang-report-fileupload: HiKVISION 综合安防管理平台 report 任意文件上传
- PoC2025-08-01hikvision-gateway-data-file-read: HIKVISION 视频编码设备接入网关 $DATA 任意文件读取
- PoC2025-08-01hikvision-ivms-8700-fileread: HIKVISION iVMS-8700综合安防管理平台 download 任意文件下载
- PoC2025-08-01hikvision-ivms-8700-fileupload: 海康威视 IVMS 8700 任意文件上传
- PoC2025-08-01hikvision-ivms-8700-upload-action-upload: HIKVISION iVMS-8700综合安防管理平台 download 任意文件下载
- PoC2025-08-01hikvision-showfile-file-read: HIKVISION 视频编码设备接入网关 showFile.php 任意文件下载漏洞
- PoC2025-08-01etc-services-permission-check: /etc/services Permission Check
- PoC2025-08-01finger-service-enabled: Linux Finger Should Be Disabled
- PoC2025-08-01linux-legacy-services-enabled: DoS Vulnerable Service Enabled
- PoC2025-08-01linux-nis-service: NIS Service Should Be Disabled
- PoC2025-08-01linux-nisplus-service: NIS+ Service Should Be Disabled
- PoC2025-08-01idocview-2word-fileupload: I Doc View /html/2word 任意文件上传漏洞
- PoC2025-08-01linux-rexec-service: rexec Service Should Be Disabled
- PoC2025-08-01idocview-fileread: I Doc View任意文件读取漏洞
- PoC2025-08-01linux-rlogin-service: rlogin Service Should Be Disabled
- PoC2025-08-01idocview-qjvqhft-fileread: IDocView在线文档预览系统qJvqhFt任意文件读取
- PoC2025-08-01linux-rsh-service: rsh Service Should Be Disabled
- PoC2025-08-01nfs-daemon-service: NFS Service Daemon Should Be Disabled
- PoC2025-08-01privesc-elvish: elvish - Privilege Escalation
- PoC2025-08-01joomla-component-vreview-sql: Joomla Component Vreview sql
- PoC2025-08-01kkfileview-upload-xss: kkFileView Upload - XSS
- PoC2025-08-01kongsoft-vgm-antivirus-wall-rce: 金山 VGM防毒墙 downFile.php 任意文件读取
- PoC2025-08-01privesc-vi: Vi - Privilege Escalation
- PoC2025-08-01privesc-view: View - Privilege Escalation
- PoC2025-08-01privesc-vim: Vim - Privilege Escalation
- PoC2025-08-01lanemonitor-getvideo-sqli: 停车场后台管理系统GetVideo存在SQL注入漏洞
- PoC2025-08-01device-guard-not-configured: Device Guard Not Configured
- PoC2025-08-01metadata-service-openstack: Openstack Metadata Service Check
- PoC2025-08-01ftp-service-running: FTP Service Running
- PoC2025-08-01service-pack-check: Latest Service Pack Check
- PoC2025-08-01unnecessary-service-check: Unnecessary Service Removal Check
- PoC2025-08-01oa8000-workflowservice-sql-inject: 华天动力OA 8000版 workFlowService SQL注入漏洞
- PoC2025-08-01telnet-service-misconfiguration: Check for Misconfigured Telnet Service
- PoC2025-08-01shikongzhiyou-formservice-sqli: 时空智友企业流程化管控系统SQL注入漏洞
- PoC2025-08-01googleadservices-partner-csp-bypass: Content-Security-Policy Bypass - Google Ad Services Partner
- PoC2025-08-01tongda-v2017-video-file-file-read: 通达OA v2017 video_file.php 任意文件下载漏洞
- PoC2025-08-01pixplug-visitor-csp-bypass: Content-Security-Policy Bypass - PixPlug Visitor
- PoC2025-08-01servicenow-kbcprod-csp-bypass: Content-Security-Policy Bypass - ServiceNow KBCProd
- PoC2025-08-01tealiumiq-visitor-service-csp-bypass: Content-Security-Policy Bypass - TealiumIQ Visitor Service
- PoC2025-08-01wanhu-oa-rhinoscript-engineservice-rce: 万户OA-RhinoScriptEngineService命令执行
- PoC2025-08-01wanhu-oa-tele-conference-service-xxe: 万户OA TeleConferenceService XXE注入漏洞
- PoC2025-08-01vimeo-csp-bypass: Content-Security-Policy Bypass - Vimeo
- PoC2025-08-01virtualearth-dev-csp-bypass: Content-Security-Policy Bypass - Virtual Earth Dev
- PoC2025-08-01webview-universal-access: Android WebView Universal Access - Detect
- PoC2025-08-01yonyou-nc-portalsesInittoolservice-disclosure: 用友 portalsesInittoolservice 泄露数据库账号密码
- PoC2025-08-01gcp-service-account: Google (GCP) Service-account
- PoC2025-08-01yonyou-nccloud-iupdateservice-xxe: 用友NC Cloud IUpdateService接口存在XXE漏洞
- PoC2025-08-01yunanbao-authservice-fastjson-rce: 云匣子 FastJson反序列化RCE漏洞
- PoC2025-08-01yunlian-pos-erp-zksrservice-sqli: Yunlian POS-ERP ZksrService SQL Injection
- PoC2025-08-01CNVD-2021-14536: Ruijie RG-UAC Unified Internet Behavior Management Audit System - Information Disclosure
- PoC2025-08-01CNVD-2023-96945: McVie Safety Digital Management Platform - Arbitrary File Upload
- PoC2025-08-01CVE-2017-9965: Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal
- PoC2025-08-01CVE-2019-11886: Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation
- PoC2025-08-01CVE-2021-35064: Kramer VIAware - Privilege Escalation and Remote Code Execution
- PoC2025-08-01CVE-2021-37291: KevinLAB BEMS 1.0 - SQL Injection
- PoC2025-08-01CVE-2021-37292: KevinLAB BEMS (Building Energy Management System) - Backdoor Account
- PoC2025-08-01CVE-2021-38154: Canon Devices - Authentication Bypass in Catwalk Server
- PoC2025-08-01CVE-2022-42149: kkFileView 4.0 - Server-Side Request Forgery
- PoC2025-08-01CVE-2025-2473: Company Visitor Management System 1.0 - SQL Injection
- PoC2025-08-01CVE-2025-58751: Vite Dev Server - Path Traversal
- PoC2025-08-01exacqvision-default-login: ExacqVision Default Login
- PoC2025-08-01enviromuux-default-login: Network Technologies Inc ENVIROMUX - Default Login
- PoC2025-08-01vidyo-default-login: Vidyo Default Login
- PoC2025-08-01trilithic-viewpoint-default: Trilithic Viewpoint Default Login
- PoC2025-08-01visionhub-default-login: VisionHub Default Login
- PoC2025-08-01kubernetes-web-view: Kubernetes Local Cluster Web View Panel- Detect
- PoC2025-08-01exposed-vscode: Visual Studio Code Directories - Detect
- PoC2025-08-01vite-config: Vite Configuration - File Exposure
- PoC2025-08-01xprober-service: X Prober Server - Information Disclosure
- PoC2025-08-01environment-rb: Environment Ruby File Disclosure
- PoC2025-08-01google-services-json: Google Service Json
- PoC2025-08-01service-account-credentials: Service Account Credentials File Disclosure
- PoC2025-08-01travis-ci-disclosure: Travis CI Disclosure
- PoC2025-08-01vscode-launch: Visual Studio Code launch.json Exposure
- PoC2025-08-01ssrf-via-proxy: SSRF via Proxy Unsafe
- PoC2025-08-01geovision-lfi: GeoVision GV-SNVR0811 - Directory Traversal
- PoC2025-08-01qvisdvr-deserialization-rce: QVISDVR JSF Deserialization - Remote Code Execution
- PoC2025-08-01apollo-adminservice-unauth: Apollo Admin Service - Unauthenticated Access
- PoC2025-08-01bravia-signage: BRAVIA Signage - Exposure
- PoC2025-08-01cadvisor-exposure: cAdvisor - Detect
- PoC2025-08-01deos-openview-panel: DEOS OPENview Admin Panel Unauthenticated Access
- PoC2025-08-01hikvision-env: Hikvision Springboot Env Actuator - Detect
- PoC2025-08-01avideo-install: AVideo Installer - Detect
- PoC2025-08-01easy-viserlabs-installer: Easy Installer by ViserLab - Exposure
- PoC2025-08-01invicti-enterprise-installer: Invicti Enterprise Installation Page - Exposure
- PoC2025-08-01navidrome-admin-install: Navidrome Admin User Creation
- PoC2025-08-01phpgedview-installer: PhpGedView Installer Exposure
- PoC2025-08-01vironeer-installer: Vironeer Installer - Exposure
- PoC2025-08-01virtual-smartzone-installer: Virtual SmartZone Setup Wizard - Exposure
- PoC2025-08-01jboss-web-service: JBoss Web Service Console - Detect
- PoC2025-08-01libvirt-exporter-metrics: Libvirt Exporter Metrics
- PoC2025-08-01moleculer-microservices: Moleculer Microservices Project
- PoC2025-08-01metadata-service-alibaba: Alibaba Metadata Service Check
- PoC2025-08-01metadata-service-aws: Amazon AWS Metadata Service Check
- PoC2025-08-01metadata-service-azure: Microsoft Azure Cloud Metadata Service Check
- PoC2025-08-01metadata-service-digitalocean: DigitalOcean Metadata Service Check
- PoC2025-08-01metadata-service-gcp: Google GCP Metadata Service Check
- PoC2025-08-01metadata-service-hetzner: Hetzner Cloud Metadata Service Check
- PoC2025-08-01metadata-service-openstack: Openstack Metadata Service Check
- PoC2025-08-01metadata-service-oracle: Oracle Cloud Metadata Service Check
- PoC2025-08-01qvidium-management-system-exposed: QVidium Management System Exposed
- PoC2025-08-01service-pwd: service.pwd - Sensitive Information Disclosure
- PoC2025-08-01servicenow-title-injection: Service Now - Title Injection
- PoC2025-08-01servicenow-widget-misconfig: ServiceNow Widget-Simple-List - Misconfiguration
- PoC2025-08-01sony-bravia-disclosure: Sony BRAVIA Digital Signage 1.7.8 System API Information Disclosure
- PoC2025-08-01sql-server-reportviewer: SQL Server ReportViewer - Exposure
- PoC2025-08-01viewpoint-system-status: ViewPoint System Status
- PoC2025-08-01weaviate-exposure: Weaviate - Exposure
- PoC2025-08-01avtech-auth-bypass: AVTECH Video Surveillance Product - Authentication Bypass
- PoC2025-08-01avtech-unauth-file-download: AVTECH Video Surveillance Product - Unauthenticated File Download
- PoC2025-08-01kevinlab-hems-backdoor: KevinLAB HEMS - Backdoor Detection
- PoC2025-08-01geovision-geowebserver-lfi-xss: GeoVision Geowebserver <= 5.3.3 - Local File Inclusion / Cross-Site Scripting
- PoC2025-08-01hikvision-fastjson-rce: HIKVISION applyCT Fastjson - Remote Command Execution
- PoC2025-08-01hikvision-ivms-file-upload-bypass: Hikvison iVMS - File Upload Bypass
- PoC2025-08-01hikvision-ivms-file-upload-rce: Hikvision iVMS-8700 - File Upload Remote Code Execution
- PoC2025-08-01hikvision-js-files-upload: Hikvision iSecure Center - File Upload
- PoC2025-08-01idocview-2word-fileupload: IDoc View /html/2word - Arbitrary File Upload
- PoC2025-08-01idocview-lfi: IDoc View - Arbitrary File Read
- PoC2025-08-01jira-servicedesk-signup: Atlassian Jira Service Desk Signup
- PoC2025-08-01joomla-marvikshop-sqli: Joomla MarvikShop ShoppingCart 3.4 - Sql Injection
- PoC2025-08-01joomla-marvikshop-xss: Joomla MarvikShop ShoppingCart 3.4 - Cross-Site Scripting
- PoC2025-08-01acti-video-lfi: ACTi-Video Monitoring - Local File Inclusion
- PoC2025-08-01commax-credentials-disclosure: COMMAX Smart Home Ruvie CCTV Bridge DVR - RTSP Credentials Disclosure
- PoC2025-08-01crocus-lfi: Crocus system Service.do - Arbitrary File Read
- PoC2025-08-01easycvr-arbitrary-file-read: EasyCVR Video Management - Arbitrary File Read
- PoC2025-08-01geowebserver-lfi: GeoVision Geowebserver 5.3.3 - Local File Inclusion
- PoC2025-08-01geowebserver-xss: GeoVision Geowebserver 5.3.3 - Cross-Site Scripting
- PoC2025-08-01hanming-lfr: Hanming Video Conferencing - Local File Inclusion
- PoC2025-08-01hanta-rce: Hanta Internet Behavior Management System - Remote Code Execution
- PoC2025-08-01hikvision-isecure-center-rce: HIKVISION iSecure Center - Remote Code Execution
- PoC2025-08-01kavita-lfi: Kavita - Local File Inclusion
- PoC2025-08-01kingsoft-vgm-lfi: Kingsoft VGM Antivirus - Arbitrary File Read
- PoC2025-08-01pingsheng-electronic-sqli: Pingsheng Electronic Reservoir Supervision Platform - Sql Injection
- PoC2025-08-01servicenow-helpdesk-credential: ServiceNow Helpdesk Credential Exposure
- PoC2025-08-01solarview-compact-xss: SolarView Compact 6.00 - Cross-Site Scripting
- PoC2025-08-01viewlinc-crlf-injection: viewLinc 5.1.2.367 - Carriage Return Line Feed Attack
- PoC2025-08-01squirrelmail-vkeyboard-xss: SquirrelMail Virtual Keyboard <=0.9.1 - Cross-Site Scripting
- PoC2025-08-01wanhu-teleconferenceservice-xxe: Wanhu OA TeleConferenceService Interface - XML External Entity Injection
- PoC2025-08-01avchat-video-chat-xss: WordPress AVChat Video Chat 1.4.1 - Cross-Site Scripting
- PoC2025-08-01contus-video-gallery-sqli: WordPress Video Gallery <= 2.8 - SQL Injection
- PoC2025-08-01vrview-xss: VRview Plugin - Cross-Site Scripting
- PoC2025-08-01wp-vr-view-xss: WP VR-View Plugin - Cross-Site Scripting
- PoC2025-08-01yonyou-nc-dispatcher-fileupload: Yonyou NC ServiceDispatcher Servlet - Arbitrary File Upload
- PoC2025-08-01netstat-service-expose: Netstat Service - Expose
- PoC2025-08-01CVE-2025-59287: Windows Server Update Service - Insecure Deserialization
- PoC2025-08-01hikvision-af-env-info-disclosure: HiKVISION 综合安防管理平台 env 信息泄漏漏洞
- PoC2025-08-01hikvision-info-leak: hikvision 配置文件泄露
- PoC2025-08-01kkfileview-panel: kkFileView Panel - Detect
- PoC2025-08-01rsyncd-detect: Rsyncd Service - Detect
- PoC2025-08-01sonicwall-sslvpn-panel: SonicWall Virtual Office SSLVPN Panel
- 2025-07-29I Doc View 在线文档预览系统 /html/2word 文件上传漏洞
- 2025-07-29I Doc View 在线文档预览系统 /html/2word 文件上传漏洞
- 2025-07-23（CVE-2025-7766）Lantronix Provisioning Manager XML外部实体攻击导致远程代码执行漏洞
- 2025-07-10当虹科技 Arcvideo Live 任意文件上传漏洞
- 2025-06-25（CVE-2025-20281）Cisco ISE和Cisco ISE-PIC未认证API输入验证不足导致任意代码执行漏洞
- 2025-06-20Vite /@fs/Users/doggy/Desktop/vite-project/ 文件读取漏洞（CVE-2025-32395）
- 2025-06-20Vite /@fs/Users/doggy/Desktop/vite-project/ 文件读取漏洞（CVE-2025-32395）
- 2025-06-10（CVE-2025-4681）upKeeper Instant Privilege Access 不当权限管理漏洞
- 2025-06-09宏景人力资源管理系统 HrpServices XXE实体注入漏洞
- 2025-06-09宏景人力资源管理系统 HrpServices SQL注入漏洞
- 2025-06-04Hikvision iVMS 4200 index.php 存在本地文件包含漏洞
- 2025-06-04（CVE-2025-4578）File Provider WordPress插件SQL注入漏洞
- 2025-06-03Hikvision Hybrid SAN/Cluster Storage 存在安全漏洞（CVE-2022-28171）
- 2025-06-03（CVE-2025-5036）Autodesk Revit RFA文件处理Use-After-Free漏洞
- 2025-05-17(CVE-2025-4812) PHPGurukul Human Metapneumovirus Testing Management System 1.0 SQL注入漏洞
- 2025-05-16（CVE-2025-4717）PHPGurukul Visitor Management System 2.0 SQL注入漏洞
- 2025-05-09WordPress插件 HTML5 Video Player SQL注入漏洞(CVE-2024-5522)
- 2025-05-09WordPress插件 HTML5 Video Player SQL注入漏洞(CVE-2024-5522)
- 2025-04-26关于portal-menu-single-view接口存在sql注入漏洞修复方案
- 2025-04-25Ivanti Virtual Traffic Manager 认证绕过漏洞(CVE-2024-7593)
- 2025-04-21Ivanti Cloud Services Appliance (CSA) 存在路径遍历漏洞 (CVE-2024-8963)
- 2025-04-21关于联查人员卡片viewPsnCard服务存在SQL注入漏洞修复方案通知
- 2025-04-11Vite 存在权限绕过导致任意文件读取漏洞(CVE-2025-32395)
- 2025-04-10Vite 信息泄露漏洞
- 2025-04-10NAVIDROME 存在身份认证绕过漏洞(CVE-2025-27112)
- 2025-04-09Apartment Visitor Management System 注入漏洞
- 2025-04-09Apartment Visitor Management System 注入漏洞
- 2025-04-07Vite 任意文件读取(CVE-2025-31486)
- 2025-04-06SourceCodester Apartment Visitors Management System 注入漏洞
- 2025-04-02Vite /@fs 文件读取漏洞（CVE-2025-30208/CVE-2025-31125）
- 2025-04-02Vite /@fs 文件读取漏洞（CVE-2025-30208/CVE-2025-31125）
- 2025-04-01Vite 任意文件读取漏洞
- 2025-04-01Vite 存在任意文件读取漏洞（CVE-2025-31125）
- 2025-03-26Vite 存在任意文件读取漏洞（CVE-2025-30208）
- 2025-03-26Vite 任意文件读取漏洞
- 2025-03-21Davinci /druid/submitLogin 默认口令漏洞
- 2025-03-21（CVE-2025-2480）Santesoft Sante DICOM Viewer Pro越界写入漏洞
- 2025-03-21Davinci /druid/submitLogin 默认口令漏洞
- 2025-03-18CVE-2025-2473 PHPGurukul 访客管理系统 2.0 SQL注入漏洞
- 2025-03-14HIKVISION iVMS /eps/triggerSnapshot/download.action 文件读取漏洞
- 2025-03-14HIKVISION iVMS /eps/triggerSnapshot/download.action 文件读取漏洞
- 2025-03-02Viayoo Via Browser 代码注入漏洞
- 2025-02-14Contec SolarView Compact /texteditor.php 代码执行漏洞（CVE-2023-46509）
- 2025-02-14Contec SolarView Compact /texteditor.php 代码执行漏洞（CVE-2023-46509）
- 2025-02-06Vitest 路径遍历漏洞
- 2025-01-28WordPress plugin VikBooking Hotel Booking Engine & PMS 跨站请求伪造漏洞
- 2025-01-18WordPress plugin WP PT-Viewer 跨站脚本漏洞
- 2025-01-17WordPress plugin Navigation Du Lapin Blanc 跨站脚本漏洞
- 2025-01-16Microsoft Active Directory Federation Services 跨站请求伪造漏洞
- 2025-01-10Aviatrix Controller /v1/api 命令执行漏洞（CVE-2024-50603）
- 2025-01-10Aviatrix Controller /v1/api 命令执行漏洞（CVE-2024-50603）
- 2024-12-31Visual Studio特权提升漏洞(CVE-2024-20656)
- 2024-12-04Veeam Service Provider Console 安全缺陷漏洞 可致远程代码执行
- 2024-11-29WordPress Plugin HTML5 Video Player 插件 id 参数 SQL 注入漏洞 （CVE-2024-1061）
- 2024-11-29WordPress Plugin HTML5 Video Player 插件 id 参数 SQL 注入漏洞 （CVE-2024-1061）
- 2024-11-15Citrix Virtual Apps and Desktops 远程代码执行漏洞
- 2024-11-13Microsoft .NET/Visual Studio 类型混淆漏洞 可导致远程代码执行
- 2024-11-08IDocView /doc/upload 文件读取漏洞
- 2024-11-08IDocView /view/qJvqhFt.json 文件读取漏洞
- 2024-11-08IDocView /doc/upload 文件读取漏洞
- 2024-11-08IDocView /view/qJvqhFt.json 文件读取漏洞
- 2024-11-03WordPress plugin SIP Reviews Shortcode for WooCommerce SQL注入漏洞
- 2024-11-03WordPress plugin SIP Reviews Shortcode for WooCommerce SQL注入漏洞
- 2024-11-03亿赛通-电子文档安全系统 HookService SQL注入漏洞
- 2024-10-31QNAP SMB Service 安全缺陷漏洞 可致远程代码执行
- 2024-10-31ServiceNow Now Platform 未授权 代码注入漏洞
- 2024-10-31DrayTek Vigor2960 Router 命令注入漏洞
- 2024-10-25宇视科技 Uniview /Interface/DevManage/VM.php 命令注入漏洞
- 2024-10-23浙江宇视科技 uniview 弱口令漏洞
- 2024-10-23Microsoft Remote Registry Service 设计缺陷漏洞 可致权限提升
- 2024-10-09Microsoft Visual Studio Code Arduino扩展 权限管理不当漏洞 可导致远程代码执行
- 2024-10-08DrayTek Vigor 路由器缓冲区溢出漏洞 可致远程代码执行
- 2024-10-08TeamViewer Remote Clients 签名验证不当漏洞 可致权限提升
- 2024-09-25Ivanti Virtual Traffic Manager 存在身份验证缺陷漏洞
- 2024-09-24iDocview upload 文件上传漏洞
- 2024-09-23Ivanti Cloud Service Appliance 未授权 路径遍历漏洞
- 2024-09-21Ivanti Cloud Service Appliance 路径穿越漏洞
- 2024-09-20某厂商智慧平台 InOutSchoolService存在SQL注入漏洞
- 2024-09-19用友时空 KSOA SpacePreview XXE漏洞
- 2024-09-14Ivanti Cloud Services Appliance 需授权 命令注入漏洞
- 2024-08-21泛微 E-Cology BlogService 存在SQL注入漏洞
- 2024-08-17Microsoft Line Printer Daemon Service 资源管理错误漏洞
- 2024-08-16万户OA TeleConferenceService XXE漏洞
- 2024-08-14Invision Community CVE-2024-30163 SQL注入漏洞
- 2024-08-14亿赛通 电子文档安全管理系统 SecretKeyService 未授权 SQL注入漏洞
- 2024-08-14Voltronic Power ViewPower Pro CVE-2023-51586 SQL注入漏洞
- 2024-08-13万户OA TeleConferenceService XXE漏洞
- 2024-08-10Devika v1 CVE-2024-40422 snapshot_path 目录遍历漏洞
- 2024-08-09宏景 eHR ajaxService SQL注入漏洞 2
- 2024-08-07ServiceNow CVE-2024-4879 Jelly模板注入漏洞
- 2024-08-07DLink Devices SOAP 接口命令执行漏洞
- 2024-08-07Tenda Devices PPPOEPassword 栈溢出漏洞
- 2024-08-05Hikvision 综合安防管理平台 /services/IWsBaseService.IWsBaseServiceHttpSoap11Endpoint 存在访问控制不当漏洞
- 2024-08-01Voltronic Power ViewPower Pro selectDeviceListBy SQL注入漏洞
- 2024-08-01Voltronic Power ViewPower Pro selectDeviceListBy SQL注入漏洞
- 2024-07-31Hikvision 综合安防管理平台 /portal/cas/login/ajax/licenseExpire.do 存在命令注入漏洞
- 2024-07-29泛微 HrmService SQL注入漏洞
- 2024-07-29泛微 e-cology HrmService sql注入漏洞
- 2024-07-26泛微 E-Cology WorkPlanService 未授权 SQL注入漏洞
- 2024-07-26泛微E-Cology9 WorkPlanService 前台SQL注入漏洞
- 2024-07-26亿赛通电子文档管理系统 NavigationAjax SQL注入漏洞
- 2024-07-26用友KSOA PreviewKPQT sql注入漏洞
- PoC2024-07-25广联达 Linkworks ArchiveWebService 文件读取漏洞
- 2024-07-25Tenda W30E VirtualSer 栈溢出漏洞
- 2024-07-25I Doc View cmd.json远程代码执行漏洞
- 2024-07-25金格 WebRevisionAjax.ashx 任意文件上传漏洞
- 2024-07-25HiKVISION 综合安防管理平台 isupm接口 信息泄露漏洞
- 2024-07-25广联达 Linkworks ArchiveWebService 文件读取漏洞
- 2024-07-24浪潮财务云 bizintegrationwebservice 远程代码执行漏洞
- 2024-07-18Opencart Divido CVE-2024-21514 SQL注入漏洞
- 2024-07-18亿赛通 EmailAuditService 不安全的反序列化漏洞
- 2024-07-17海康威视综合安防系统ISecure Center未授权代码执行
- 2024-07-17王道4S管理系统PeiJianFuncWebService存在SQL注入漏洞
- 2024-07-17ServiceNowUI /login.do Jelly模板注入漏洞（CVE-2024-4879）
- 2024-07-17ServiceNowUI /login.do Jelly模板注入漏洞（CVE-2024-4879）
- 2024-07-14ServiceNow UI Jelly模板注入漏洞(CVE-2024-4879)
- 2024-07-12Uniview NVR301-04S2-P4 CVE-2024-3850 跨站脚本漏洞
- 2024-07-12ServiceNow Jelly 远程代码执行漏洞
- 2024-07-12ServiceNow jvar_page_title 远程代码执行漏洞
- 2024-07-04Linear eMerge E3-Series Devices CVE-2019-7254 目录遍历漏洞
- 2024-07-04Optergy Proton Devices CVE-2019-7272 信息泄露漏洞
- PoC2024-06-30MSService服务init.do接口处存在SQL注入漏洞
- 2024-06-28Voltronic Power ViewPower Pro UpLoadAction 任意文件上传漏洞
- 2024-06-28Samsung SmartViewer STWAxConfig内存损坏漏洞
- 2024-06-13HPE Moonshot Provisioning Manager设备server_response目录遍历漏洞
- 2024-06-13亿赛通 LogDownLoadService SQL注入漏洞
- 2024-06-07Hikvision综合安防管理平台 applyAutoLoginTicket 远程代码执行漏洞
- 2024-06-06WordPress 插件 WPvivid 未授权访问漏洞
- 2024-06-05libvirt 弱口令漏洞
- 2024-06-04DrayTek Vigor AP910C 路由器 /goform/addRouting 远程命令执行漏洞
- 2024-05-31Naviwebs Navigate CMS 认证绕过漏洞
- 2024-05-23亿赛通 SecretKeyService SQL注入漏洞
- 2024-05-09Linear eMerge E3-Series Devices CVE-2019-7255 跨站脚本漏洞
- 2024-05-09QNAP VioStor NVR 系统命令注入漏洞
- 2024-04-26亿赛通电子文档管理系统 SecureUsbService SQL注入漏洞
- 2024-04-26亿赛通电子文档管理系统 UploadFileManagerService 任意文件读取漏洞
- 2024-04-26Vinchin Backup and Recovery CVE-2024-25228 命令注入漏洞
- 2024-04-26Cisco Common Services Devices Center 跨站脚本漏洞
- 2024-04-23HIKVISION 联网网关 downdb.php 任意文件读取漏洞
- 2024-04-18kkFileView /fileUpload 存在任意文件上传漏洞
- 2024-04-18Advantech iView CVE-2022-2136 SQL 注入漏洞
- 2024-04-16kkFileView zipslip 远程代码执行漏洞
- 2024-04-11Voltronic Power ViewPower Pro autoMatchMac 命令注入漏洞
- 2024-04-11Voltronic Power ViewPower Pro updateManagerPassword 认证绕过漏洞
- 2024-04-03I Doc View在线文档预览系统远程命令执行漏洞
- 2024-04-03VISAM VBASE Automation Base ProjektInfo File Parsing 外部实体注入漏洞
- 2024-03-29Microsoft Visual Studio Code Remote Containers 插件远程代码执行漏洞
- 2024-03-25(CVE-2023-33923) HashThemes Viral News、HashThemes Viral、HashThemes HashOne 授权漏洞
- 2024-03-14平升电子水库安全监管平台 SIMMaintainService.asmx存在SQL注入漏洞
- 2024-03-14WECON LeviStudioU Disc 标签 WordAddr 栈溢出漏洞
- 2024-03-14WECON LeviStudioU Alarm 标签 WordAddr 栈溢出漏洞
- 2024-03-14WECON LeviStudioU Alarm Tag WordAddr9 堆栈缓冲区溢出漏洞
- 2024-03-12ONVIF 弱口令漏洞
- 2024-03-11（CVE-2024-1441）libvirt udevListInterfacesByStatus函数越界写入漏洞
- 2024-03-08苏州科达ViewShot用户登录系统login.php存在信息泄露漏洞
- 2024-03-07IDocView 任意文件读取漏洞
- 2024-02-29Hikvision 8700 IWsBaseServiceHttpSoap11Endpoint 信息泄露漏洞
- 2024-02-29Naviwebs Navigate CMS 任意文件上传漏洞
- 2024-02-29Hikvision Hybrid SAN CVE-2022-28161 SQL注入漏洞
- 2024-02-22Delta Electronics InfraSuite Device Master CheckLoadingStartupConfig 目录遍历漏洞
- 2024-02-22Advantech iView NetworkServlet 命令注入漏洞
- 2024-02-22Shibboleth Identity Provider OIDC OP 插件 SSRF 漏洞
- 2024-02-22Advantech iView CVE-2022-2138 拒绝服务漏洞
- 2024-02-22VICIdial CVE-2022-34878 SQL注入漏洞
- 2024-02-22Vim Retab 整数型溢出漏洞
- 2024-02-22WWBN AVideo image403.php页面错误信息跨站脚本漏洞
- 2024-02-22Apache Multiviews CVE-2001-0731 任意目录遍历漏洞
- 2024-02-22Advantech iView ConfigurationServlet SQL注入漏洞
- 2024-02-22kkFileview v4.1.0 跨站脚本攻击漏洞
- 2024-02-22Advantech iView CVE-2022-2139 目录遍历漏洞
- 2024-02-22Piano LED Visualizer CVE-2022-24900目录遍历漏洞
- 2024-02-22VICIdial CVE-2022-34876 SQL注入漏洞
- 2024-02-22WWBN AVideo charts tab selection XSS漏洞
- 2024-02-22SolarView Compact CVE-2022-29303命令注入漏洞
- 2024-02-22WWBN AVideo 11.6跨站脚本漏洞
- 2024-02-22Delta Electronics InfraSuite Device Master Opcode 512目录遍历漏洞
- 2024-02-22PSC(Platform services controller)不安全的反序列化漏洞
- 2024-02-22VICIdial CVE-2022-34877 SQL注入漏洞
- 2024-02-22SolarView Compact CVE-2022-29299 XSS 漏洞
- 2024-02-22Delta Electronics InfraSuite Device Master Device-DataCollect 反序列化漏洞
- 2024-02-22Ivanti Service Manager CVE-2021-38560 跨站脚本漏洞
- 2024-02-22DrayTek Vigor 路由器命令注入漏洞
- 2024-02-22WWBN AVideo 11.6跨站脚本漏洞
- 2024-02-22Microsoft Visual Studio Code Markdown Preview Enhanced扩展命令注入漏洞
- 2024-02-22WordPress WPvivid Backup插件class-wpvivid-export-import目录遍历漏洞
- 2024-02-22Advantech iView CVE-2022-2136 SQL 注入漏洞
- 2024-02-22Crestron Devices CVE-2022-23178信息泄露漏洞
- 2024-02-22Google Chrome ServiceWorker CVE-2022-2480 释放后重用漏洞
- 2024-02-22WordPress插件 Visual Slide Box Builder SQL注入漏洞
- 2024-02-22WWBN AVideo chunkFile 命令注入漏洞
- 2024-02-22SolarView CVE-2022-40881 远程命令执行漏洞
- 2024-02-22Advantech iView CVE-2022-2135 SQL 注入漏洞
- 2024-02-22Advantech iView CVE-2022-2135 SQL 注入漏洞
- 2024-02-22Active Directory Federation Services权限提升漏洞
- 2024-02-22WWBN AVideo 11.6跨站脚本漏洞
- 2024-02-07VISAM VBASE Automation Base LayerSettings File Parsing XXE漏洞
- 2024-02-07Draytek vigor 2960 CVE-2023-1163 任意文件读取漏洞
- 2024-02-07VISAM VBASE Automation Base GestureConfigurations文件外部实体注入漏洞
- 2024-02-07SolarView Compact through 6.00 命令执行漏洞
- 2024-02-07I Doc View upload任意文件读取漏洞
- 2024-02-07Uniview CVE-2021-45039 缓冲区溢出漏洞
- 2024-02-07VinChin Backup Recovery 认证绕过漏洞
- 2024-02-07Juniper Devices CVE-2023-36844 远程代码执行漏洞
- 2024-02-07Advantech iView ConfigurationServlet SQL注入漏洞
- 2024-02-07Hikvision CVE-2023-28809 远程Session窃取漏洞
- 2024-02-07STAGIL Navigation for Jira目录遍历漏洞
- 2024-02-07DrayTek Vigor 2960路由器 CVE-2023-1162 命令注入漏洞
- 2024-02-07VinChin Backup Recovery 命令注入漏洞
- 2024-02-07STAGIL Navigation for Jira snjFooterNavigationConfig 目录遍历漏洞
- 2024-02-07Vitogate 300 CVE-2023-45852 任意命令执行漏洞
- 2024-01-31Apache ServiceComb Service-Center SSRF漏洞(CVE-2023-44313)
- 2024-01-30亿赛通电子文档安全管理系统 FileAuditService 接口远程代码执行漏洞
- 2024-01-30亿赛通电子文档安全管理系统 ExamCDGDocService1 接口远程代码执行漏洞
- 2024-01-30用友 BIP ServiceDispatcher 接口远程代码执行漏洞
- 2024-01-30亿赛通电子文档安全管理系统 FileAuditService 接口远程代码执行漏洞
- 2024-01-30亿赛通电子文档安全管理系统 ExamCDGDocService1 接口远程代码执行漏洞
- 2024-01-30用友 BIP ServiceDispatcher 接口远程代码执行漏洞
- 2024-01-29飞企-oa-videotexMonitor-SQL注入漏洞
- 2024-01-25用友 YonBIP ServiceDispatcher 远程代码执行漏洞
- 2024-01-03华天动力-TemplateService-任意文件读取
- PoC2024-01-02I Doc View任意文件上传漏洞
- 2023-12-22海康威视 IVMS8700 IWsBaseService 信息泄露漏洞
- 2023-12-18Hikvision Intercom Broadcasting System 操作系统命令注入漏洞
- 2023-12-18Hikvision Intercom Broadcasting System 路径遍历漏洞
- 2023-12-18Hikvision Intercom Broadcasting System 信息泄露漏洞
- 2023-12-15I Doc View在线文档预览系统 view任意文件读取漏洞
- 2023-12-15I Doc View在线文档预览系统 存在SSRF漏洞
- 2023-12-15I Doc View在线文档预览系统 upload 任意文件读取漏洞
- 2023-12-15iDocview /view/url 任意文件读取及SSRF漏洞
- 2023-12-14Davinci存在默认口令
- 2023-12-13Davinci 存在命令执行漏洞
- 2023-12-07IDocView /system/cmd.json 任意命令执行漏洞
- 2023-12-04kkFileView 接口未授权访问漏洞
- 2023-11-30Sme.UP ERP ResourceService 文件读取漏洞（CVE-2023-26758）
- 2023-11-24I Doc View 默认密码
- 2023-11-24I Doc View 在线文档预览系统 system 远程命令执行漏洞
- 2023-11-24I Doc View 在线文档预览系统 system 远程命令执行漏洞
- 2023-11-17HIKVISION iSecure Center /lm/api/files 文件上传漏洞
- 2023-11-17HIKVISION iSecure Center /lm/api/files 文件上传漏洞
- 2023-11-02Vitogate300远程命令执行(CVE-2023-45852)
- 2023-10-26Revive Adserver广告管理系统存在远程代码执行漏洞(CVE-2019-5434)
- 2023-09-28Vitogate 300 /cgi-bin/vitogate.cgi 命令执行
- 2023-09-27Red Hat Undertow 安全漏洞
- 2023-09-22Revive Adserver 广告管理系统 adxmlrpc.php 文件远程代码执行漏洞（CVE-2019-5434）
- 2023-09-22Sme.UP ERP ResourceService 文件读取漏洞（CVE-2023-26758）
- 2023-09-22Revive Adserver 广告管理系统 adxmlrpc.php 文件远程代码执行漏洞（CVE-2019-5434）
- 2023-09-22Sme.UP ERP ResourceService 文件读取漏洞（CVE-2023-26758）
- 2023-09-08I Doc View在线文档预览系统命令执行漏洞
- 2023-09-06Geovision IP Camera /JpegStream.cgi 远程命令执行漏洞
- 2023-09-06Avaya Aura Device Services /PhoneBackup/ 任意文件上传漏洞
- 2023-09-04Contec SolarView Compact /Solar_Image.php 任意文件上传漏洞
- 2023-09-01DrayTek Vigor AP910C 路由器默认口令漏洞
- 2023-09-01DrayTek Vigor AP910C 路由器后台命令执行漏洞
- 2023-09-01DrayTek Vigor AP910C 路由器默认口令漏洞
- 2023-09-01DrayTek Vigor AP910C 路由器后台命令执行漏洞
- 2023-08-28Apache Airflow Spark Provider 反序列化漏洞(CVE-2023-40195)
- 2023-08-15HIKVISION iVMS-8700 综合安防管理平台 download 文件读取漏洞
- 2023-08-15HIKVISION iVMS-8700 综合安防管理平台 download 文件读取漏洞
- 2023-08-12HiKVISION 综合安防管理平台 files 文件上传漏洞
- 2023-08-12HiKVISION 综合安防管理平台 files 文件上传漏洞
- 2023-08-10Draytek Vigor 2960 网关文件读取漏洞
- 2023-08-10Draytek Vigor 2960 网关文件读取漏洞
- 2023-08-09HiKVISION 综合安防管理平台 report 任意文件上传漏洞
- 2023-08-09iDocView /html/2word 远程代码执行漏洞
- 2023-08-06kkFileView 4.1.0 存在ssrf漏洞(CVE-2022-43140)
- 2023-08-01kkFileView 4.0.0反射型XSS漏洞(CVE-2022-29349)
- 2023-08-01SolarView Compact 6.00反射型XSS漏洞(CVE-2022-29301)
- 2023-08-01Geovision IP 摄像头存在敏感信息泄露
- 2023-08-01Geovision IP 摄像头JpegStream.cgi 文件存在命令执行漏洞
- 2023-08-01HIKVISION 综合安防管理平台Springboot信息泄露
- 2023-07-28SolarView Compact downloader.php 任意命令执行漏洞（CVE-2023-23333）
- 2023-07-28SolarView Compact downloader.php 任意命令执行漏洞（CVE-2023-23333）
- 2023-07-18宇视科技 Uniview 远程命令执行漏洞
- 2023-07-06时空智友企业流程化管控系统 formservice 文件上传漏洞
- 2023-07-06时空智友企业流程化管控系统 formservice 文件上传漏洞
- 2023-07-03maxView Storage Manager 系统 dynamiccontent.properties.xhtml 远程代码执行漏洞
- 2023-07-03Avaya Aura Device Services r软件 PhoneBackup 任意文件上传漏洞
- 2023-06-26Contec SolarView Compact dl.php 任意文件读取漏洞
- 2023-06-26HIKVISION iSecure Center综合安防管理平台任意文件上传
- 2023-06-23jcvi 命令执行漏洞(CVE-2023-35932)
- 2023-06-19STAGIL Navigation 低于2.0.52版本存在任意文件读取漏洞(CVE-2023-26256)
- 2023-06-19STAGIL Navigation 低于2.0.52版本存在任意文件读取漏洞(CVE-2023-26255)
- 2023-06-19Draytek VigorConnect 6.0-B3 - 任意文件读取(CVE-2021-20124)
- 2023-06-19Draytek VigorConnect 1.6.0-B3 -任意文件读取(CVE-2021-20123)
- 2023-06-15泛微OA办公系统 PluginViewServlet 认证绕过漏洞
- 2023-06-15Avaya Aura Device Services r软件 PhoneBackup 任意文件上传漏洞
- 2023-06-15泛微OA办公系统 PluginViewServlet 认证绕过漏洞
- 2023-06-15Avaya Aura Device Services r软件 PhoneBackup 任意文件上传漏洞
- 2023-06-14Apache Axis SOAPMonitor Service 远程代码执行漏洞
- 2023-06-14Microsoft Visual Studio和Microsoft .NET 安全漏洞
- 2023-06-13Siemens Teamcenter Visualization and JT2Go空指针解引用漏洞
- 2023-06-13(CVE-2023-33124) Siemens JT2GO 越界写入漏洞
- 2023-06-10KramerAV VIA GO²存在sql注入漏洞
- 2023-06-10KramerAV VIA GO²存在任意文件下载漏洞（CVE-2023-33507）
- 2023-06-09SolarView Compact downloader.php 任意命令执行漏洞(CVE-2023-23333)
- 2023-06-08maxView Storage Manager 系统 dynamiccontent.properties.xhtml 远程代码执行漏洞
- 2023-06-08maxView Storage Manager 系统 dynamiccontent.properties.xhtml 远程代码执行漏洞
- 2023-06-06WordPress plugin ReviewX 安全漏洞
- 2023-06-01Geovision IP 摄像头PictureCatch.cgi 文件存在命令执行漏洞
- 2023-06-01kkFileView onlinePreview 任意文件读取漏洞
- 2023-06-01kkFileView onlinePreview 任意文件读取漏洞
- 2023-05-04kkFileView onlinePreview 任意文件读取漏洞(CVE-2021-43734)
- 2023-04-20SolarView Compact 6.00XSS(CVE-2022-31373)
- 2023-04-20kkFileView 4.1.0XSS(CVE-2022-40879)
- 2023-03-27Vilar IPCamera 摄像头 /hy-cgi/user.cgi 路径存在敏感信息泄露
- 2023-03-27Vitek /upload_check.php 路径存在任意文件上传漏洞
- 2023-03-23Geovision IP Camera /PictureCatch.cgi 路径存在远程命令执行
- 2023-03-09海康威视综合安防系统ISecure Center未授权代码执行
- 2023-02-02kkFileView 跨站脚本漏洞
- 2023-01-18KubeView敏感信息泄露(CVE-2022-45933)
- 2023-01-06All-in-One Video WordPress 任意文件读取与SSRF（cve-2022-2633）
- 2022-11-01多家厂商多个产品默认权限配置不当漏洞(CVE-2020-36605)
- 2022-10-31(CVE-2022-2190) WordPress图库插件未正确转义REQUEST_URI参数导致反射型跨站脚本漏洞
- 2022-10-21Page Views Count < 2.4.15 - 未经验证的SQL注入(CVE-2022-0434)
- 2022-09-30kkFileView 跨站脚本漏洞
- 2022-09-13ServiceNow logout_redirect.do 存在跨站脚本攻击漏洞(CVE-2022-38463)
- 2022-08-30HIKVISION 综合安防管理平台 远程命令执行漏洞
- 2022-08-24Kavita任意文件读取
- 2022-08-24CVE-2022-33147 WWBN AVideo 11.6存在SQL注入漏洞
- 2022-08-22AVideo SQL注入漏洞(CVE-2022-33147)
- 2022-08-22AVideo 插件SQL注入漏洞(CVE-2022-33148)
- 2022-08-22AVideo 插件 SQL注入漏洞(CVE-2022-33149)
- 2022-08-18kkFileView 跨站脚本漏洞
- 2022-08-09(CVE-2022-35827) Visual Studio 远程工具 输入验证漏洞
- 2022-08-09(CVE-2022-35826) Visual Studio 远程工具 输入验证漏洞
- 2022-07-22(CVE-2022-2137) Advantech iView SNMP 命令注入漏洞
- 2022-07-11SolarView Compact 7.0 Solar_Image.php任意文件上传漏洞（bypass）
- 2022-07-06SolarView Compact 6.0 downloader.php任意文件读取漏洞(CVE-2022-29298)
- 2022-07-01浙江宇视科技 uniview LogReport.php 命令执行漏洞
- 2022-06-30多款Hikvision产品安全漏洞
- 2022-06-07SolarView Compact 6.0 Solar_Image.php任意文件上传漏洞
- 2022-05-31SolarView Compact 6.0 texteditor.php命令执行漏洞
- 2022-05-30SolarView Compact 6.0 texteditor.php任意文件读取漏洞
- 2022-05-30SolarView Compact 6.0 network_test.php命令执行漏洞
- 2022-05-25Keking kkFileView 跨站脚本漏洞
- 2022-05-23SolarView Compact 6.0 conf_mail.php 命令注入(CVE-2022-29303)
- 2022-05-19kkFileView getCorsFile 任意文件读取漏洞(CVE-2021-43734)
- 2022-02-15Keking kkFileview 路径遍历漏洞
- 2022-02-08EMC ViPR SRM跨站请求伪造漏洞（NVD-C-2016-22474）
- 2022-02-08Micro Focus Vibe 跨站脚本漏洞
- 2022-01-10Vinga WR-N300 后台命令执行(CVE-2021-43469)
- 2021-12-01Draytek Vigor系列路由器远程命令注入(CVE-2020-15415)
- 2021-11-24HIKVISION流媒体管理服务器账号密码泄露
- 2021-11-22ADSelfService Plus远程代码执行漏洞(CVE-2021-40539)
- 2021-11-17CVE-2021-40539 Zoho ManageEngine ADSelfService Plus存在远程代码执行漏洞
- 2021-11-08Mobile Viewpoint WMT存在默认密码漏洞(CVE-2020-35338)
- 2021-10-22Vivotek 网络摄像头远程命令执行(CVE-2017-9828)
- 2021-10-22Vivotek 网络摄像头任意文件读取(CVE-2017-9829)
- 2021-10-12VICIdial vicidial_mysqli_errors.txt 信息泄漏漏洞(CVE-2021-28854)
- 2021-10-08Aviatrix Controller 6.x 任意文件上传(CVE-2021-40870)
- 2021-10-07WordPress FV Flowplayer跨站脚本漏洞
- 2021-09-26HIKVISION 流媒体管理服务器-任意文件读取
- 2021-09-22Hikvision Web Server 操作系统命令注入漏洞
- 2021-09-17KevinLAB BEMS登录口sql注入
- 2021-09-09HIKVISION 视频编码设备接入网关 showFile.php任意文件下载
- 2021-09-09苏州科达ViewShot用户登录系统存在目录遍历
- 2021-08-11xerox CentreWare Internet Services存在未授权访问
- 2021-08-09HIKVISION 视频编码设备接入网关 存在未授权访问漏洞
- 2021-06-29McAfee MVISION EDR 操作系统操作系统命令注入漏洞
- 2021-06-28HIKVISION 视频编码设备接入网关 任意文件下载
- 2021-04-20HIKVISION 流媒体管理服务器 后台任意读取
- 2021-03-29HIKVISION 流媒体管理服务器 弱口令
- 2021-03-15VMware View Planner 远程代码执行漏洞（CVE-2021-21978）
- 2021-03-04VMware View Planner logupload logMetaData 远程代码执行漏洞
- 2021-01-19DrayTek Vigor2960、Vigor3900和Vigor300B 命令注入漏洞(CVE-2020-8515)
- 2021-01-19Supervisord 远程命令执行漏洞（CVE-2017-11610）
- 2021-01-19web service监控-未授权访问
- 2021-01-19vietsol-弱口令
- 2021-01-19VideoIQ Camera-本地文件泄露
- 2021-01-19VICIdial user_authorization-非授权命令执行
- 2021-01-19supervisor-未授权访问
- 2021-01-19strongsoft灾害预警系统RainChartDataProvider.ashx页面stcd参数-SQL注入
- 2021-01-19opsview监控系统-目录遍历/任意文件读取
- 2021-01-19Integrated IT Services Pvt. Ltd-绕过登录admin
- 2021-01-19Vivotek IP Cameras-未授权访问(CVE-2013-4985)
- 2021-01-19Vitek-任意文件上传处rce
- 2021-01-19Vitek menu.env-敏感信息泄露
- 2021-01-19Vitek-信息泄露
- 2021-01-19Visual Chile CMS-SQL注入
- 2021-01-19VideoIQ-Camera-弱口令
- 2021-01-19Vicworl系统VICWOR_1.SQL-数据库备份文件下载漏洞
- 2021-01-19V2会议系统BroadcastWebservice-SQL注入
- 2021-01-19Supervisord-远程代码执行
- 2021-01-19Supervisor-弱口令
- 2021-01-19PelcoVideoXpert摄像头-任意文件读取
- 2021-01-19PACSOne Server 6.6.2 DICOM Web Viewer-列出目录
- 2021-01-19Opsview-未授权访问
- 2021-01-19IQinVision 未鉴权访问/图像泄露/可关闭设备
- 2021-01-19IQinVision 默认口令
- 2021-01-19Firehose_SERVICE_MONITORING jmx-未授权访问
- 2021-01-19DrayTek-Vigor-Router防火墙路由器-默认口令
- 2021-01-19Devilbox堆栈管理-未授权访问
- 2021-01-19Cambium Networks Services Server-任意密码下载
- 2021-01-19Cambium Networks Services-目录遍历
- 2021-01-19Arecont Vision摄像头-弱口令
- 2021-01-13JT2Go 代码执行漏洞
- 2021-01-13Siemens Jt2go 和 Teamcenter Visualization 安全漏洞
- 2021-01-06Lukashinsch Spring Boot Actuator Logview 路径遍历漏洞
- 2020-12-10Microsoft多个产品安全漏洞(CVE-2020-17156)
- 2020-06-14kkFileView getCorsFile ssrf 漏洞
- 2020-01-04Visual Mining NetCharts Server 任意文件上传漏洞
- 2019-12-28Hikvision DS-2CD7153-E IP Camera 安全漏洞
- 2019-12-28WordPress Movies 跨站脚本漏洞
- 2019-06-01NUUO Network Video Recorder 命令注入漏洞
- 2018-11-01Apache HTTPD mod_jk 目录遍历漏洞(CVE-2018-11759)
- 2018-01-02Schneider Electric Pelco VideoXpert Enterprise 路径遍历漏洞
- 2018-01-02Schneider Electric Pelco VideoXpert Enterprise目录遍历漏洞（CNVD-2017-38304）
- 2017-11-09ManageEngine ServiceDesk任意文件下载漏洞
- 2017-05-06多款Hikvision产品安全漏洞
- 2017-04-29hoozin_viewer 缓冲区溢出代码执行漏洞
- 2016-11-26Android Webview 远程代码执行漏洞
- 2016-10-14Microsoft Video Control 远程代码执行漏洞
- 2016-10-05HPE KeyView 远程代码执行漏洞
- 2016-10-05HPE KeyView 远程代码执行漏洞
- 2016-10-05HPE KeyView 远程代码执行漏洞
- 2016-10-05HPE KeyView 远程代码执行漏洞
- 2016-09-30EMC ViPR SRM 跨站脚本漏洞
- 2016-09-18EMC ViPR SRM 跨站脚本漏洞
- 2016-09-18EMC ViPR SRM 跨站脚本漏洞
- 2016-09-18EMC ViPR SRM 跨站请求伪造漏洞
- 2016-07-16Accela Civic Platform Citizen Access portal 跨站脚本漏洞和任意文件上传漏洞
- 2016-07-16Accela Civic Platform Citizen Access portal 跨站脚本漏洞和任意文件上传漏洞
- 2016-04-21EMC ViPR SRM 跨站请求伪造漏洞
- 2016-02-11Microsoft Windows权限提升漏洞（CNVD-2016-01082）
- 2015-11-19Oracle WebLogic Server WLS 组件远程代码执行漏洞CVE-2015-4852
- 2015-01-21EMC M&R和ViPR SRM 跨站脚本漏洞
- 2015-01-21EMC M&R和ViPR SRM 目录遍历漏洞
- 2015-01-21EMC M&R和ViPR SRM 任意文件上传漏洞
- 2014-08-26SAS Institute SAS Visual Analytics 任意文件上传漏洞
- 2013-11-29HP Service Manager/ServiceCenter 远程代码执行漏洞
- 2013-11-05HP LoadRunner Virtual User Generator 远程代码执行漏洞
- 2013-11-05HP LoadRunner Virtual User Generator 远程代码执行漏洞
- 2013-08-01Cisco Wide Area Application Services 远程代码执行漏洞
- 2013-06-08QNAP VioStor NVR和QNAP NAS 远程代码执行漏洞
- 2013-05-25Microsoft Windows win32k.sys win32k!EPATHOBJ::pprFlattenRec本地权限提升漏洞
- 2013-05-06Microsoft Internet Explorer 8 'vtable' 代码注入漏洞
- 2012-12-31Microsoft IE mshtml!CDwnBindInfo对象释放后重用代码执行漏洞
- 2012-11-03IrfanView FlashPix插件远程代码执行漏洞
- 2012-05-22HP Business Service Management远程代码执行漏洞
- 2011-12-30HP Database Archiving Software远程代码执行漏洞
- 2011-12-30HP Database Archiving Software远程代码执行漏洞
- 2011-12-30HP Database Archiving Software远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务HPFGConfig远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务EXEC_INTEGUTIL远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务EXEC_BAR远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务bm消息处理远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务stutil消息处理远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务EXEC_SCRIPT远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务omniiaputil消息处理远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务GET_FILE远程代码执行漏洞
- 2011-03-10Novell Vibe OnPrem远程代码执行漏洞
- 2010-05-14HP OpenView Network Node Manager未明远程代码执行漏洞
- 2010-05-14HP OpenView Network Node Manager未明远程代码执行漏洞
- 2010-05-14HP OpenView Network Node Manager未明远程代码执行漏洞
- 2010-01-22Bits Video Script 任意文件上传漏洞
- 2009-06-23Edraw PDF Viewer Component "pdfviewer.ocx" 任意文件上传漏洞
- 2009-02-17WikkiTikkiTavi 'upload.php' 任意文件上传漏洞
- 1999-07-19Array Services守护程序权限许可漏洞
- 叡揚資訊｜Vitals ESP - 存在3個漏洞
- 藏識科技｜O'View MapServer - Server-Side Request Forgery
- GeoVision 已停止維護之設備 - OS Command Injection
- 全景軟體 HWATAIServiSign Windows版本 - Stack-based Buffer Overflow
- 全景軟體 TCBServiSign Windows版本 - Stack-based Buffer Overflow
- 全景軟體 TCBServiSign Windows版本 - Improper Input Validation
- 全景軟體 TCBServiSign Windows版本 - Improper Input Validation
- 全景軟體 TCBServiSign Windows版本 - Inadequate Encryption Strength
- 中華數位科技 Mail SQR Expert 與 Mail Archiving Expert - OS Command Injection
- GeoVision 已停止維護之設備 - OS Command Injection
- 醫位資訊 FS-EZViewer(Web) - Sensitive Data Exposure
- 醫位資訊 FS-EZViewer(Web) - SQL Injection
- 叡揚資訊 Vitals ESP - Arbitrary File Upload
- 叡揚資訊 Vitals ESP - Use of Hard-coded Cryptographic Key