EBS Vulnerabilities
121 vulnerabilities related to EBS
- PoC2026-08-18ibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery
- PoC2026-08-16CVE-2025-13528: Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export
- PoC2026-07-31CVE-2021-47795: GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting
- PoC2026-05-19Next.js WebSocket 服务器端请求伪造漏洞（CVE-2026-44578）
- 2026-05-12关于NC系统IMsgCenterWebService的sql注入漏洞的安全通告
- 2026-04-10Vite Websocket 文件读取漏洞（CVE-2026-39363）
- PoC2026-01-08oracle-ebs-sqllog-exposure: Oracle EBS SQL Log - Exposure
- PoC2025-11-21CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass
- 2025-10-24（CVE-2015-10137）WordPress Contact Form With File Upload插件任意文件上传漏洞
- 2025-10-15Project-Online-Shopping-Website SQL注入漏洞
- 2025-10-01Code-Projects E-Commerce Website SQL注入漏洞
- PoC2025-09-05用友NC IMsgCenterWebService 命令执行漏洞
- 2025-09-05用友NC IMsgCenterWebService 命令执行漏洞
- 2025-09-01e-weaver-eoffice-webservice-upload-fileupload: E-Weaver EOffice webservice upload file upload
- 2025-09-01ip-guard-webserver-rce: IP-guard WebServer 远程命令执行漏洞
- 2025-08-09（CVE-2025-8751）Protected Total WebShield Extension Block Page组件跨站脚本漏洞
- PoC2025-08-01CVE-2022-29455-headless: WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting
- PoC2025-08-01CVE-2012-4032: WebsitePanel before v1.2.2.1 - Open Redirect
- PoC2025-08-01CVE-2015-7450: IBM WebSphere Java Object Deserialization - Remote Code Execution
- PoC2025-08-01CVE-2017-18490: Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18491: Contact Form by BestWebSoft < 4.0.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18492: Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18494: Custom Search by BestWebSoft < 1.36 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18501: Social Login by BestWebSoft < 0.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18502: Subscriber by BestWebSoft < 1.3.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18505: BestWebSoft's Twitter < 2.55 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18516: LinkedIn by BestWebSoft < 1.0.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18518: SMTP by BestWebSoft < 1.1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18527: Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18528: PDF & Print by BestWebSoft < 1.9.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18529: PromoBar by BestWebSoft < 1.1.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18530: Rating by BestWebSoft < 0.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18532: Realty by BestWebSoft < 1.1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18556: Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18557: Google Maps by BestWebSoft < 1.3.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18558: Testimonials by BestWebSoft < 0.1.9 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18564: Sender by BestWebSoft < 1.2.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18566: User Role by BestWebSoft < 1.5.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-24891: WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-27748: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery
- PoC2025-08-01CVE-2021-32305: Websvn <2.6.1 - Remote Code Execution
- PoC2025-08-01CVE-2022-1329: Elementor Website Builder - Remote Code Execution
- PoC2025-08-01CVE-2022-29455: WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting
- PoC2025-08-01CVE-2025-41646: RevPi Webstatus <= v2.4.5 - Authentication Bypass
- PoC2025-08-01CNVD-2017-26282: 极通ewebs 应用虚拟化系统 任意文件读取
- PoC2025-08-01ebs-encryption-disabled: EBS Encryption - Disabled
- PoC2025-08-01azure-storage-static-website-review: Azure Storage Static Website Configuration Review
- PoC2025-08-01glodon-linkworks-gwgdwebservice-sqli: 广联达 Linkworks GWGdWebService SQL 注入
- PoC2025-08-01asp-webshell: ASP/ASP.NET Webshell - Detect
- PoC2025-08-01jsp-webshell: JSP Webshell - Detect
- PoC2025-08-01php-webshell: PHP Webshell - Detect
- PoC2025-08-01openplc-default-login: OpenPLC Webserver v3 - Default Login
- PoC2025-08-01oracle-ebs-credentials: Oracle E-Business System Credentials Page - Detect
- PoC2025-08-01websheets-config: Websheets Configuration File - Detect
- PoC2025-08-01oracle-ebs-sqllog-disclosure: Oracle EBS - SQL Log Disclosure
- PoC2025-08-01ibm-friendly-path-exposure: IBM Websphere Friendly Path Exposure
- PoC2025-08-01ibm-websphere-xml: IBM WebSphere Application - Source File Exposure
- PoC2025-08-01turbo-website-installer: Turbo Website Reviewer Installer Panel
- PoC2025-08-01geovision-geowebserver-lfi-xss: GeoVision Geowebserver <= 5.3.3 - Local File Inclusion / Cross-Site Scripting
- PoC2025-08-01oracle-ebs-bispgrapgh-file-read: Oracle eBusiness Suite - Improper File Access
- PoC2025-08-01avada-xss: WordPress Avada Website Builder <7.4.2 - Cross-Site Scripting
- PoC2025-08-01ewebs-arbitrary-file-reading: EWEBS - Local File Inclusion
- PoC2025-08-01geowebserver-lfi: GeoVision Geowebserver 5.3.3 - Local File Inclusion
- PoC2025-08-01geowebserver-xss: GeoVision Geowebserver 5.3.3 - Cross-Site Scripting
- 2025-07-10RevPi Webstatus 认证绕过漏洞(CVE-2025-41646)
- 2025-04-25WebServer 注入漏洞
- 2025-04-25WebServer 注入漏洞
- 2025-04-05（CVE-2025-3268）TinyWebServer m_url_real参数身份验证绕过漏洞
- 2025-03-09Ecommerce-Website 注入漏洞
- 2024-09-23FreeBSD bhyve USB代码 越界读取漏洞
- 2024-09-10FreeBSD 社区 FreeBSD UMTX_OP_SHM UAF 漏洞 可致远程代码执行
- PoC2024-07-25广联达 Linkworks ArchiveWebService 文件读取漏洞
- 2024-07-25广联达 Linkworks ArchiveWebService 文件读取漏洞
- 2024-07-24浪潮财务云 bizintegrationwebservice 远程代码执行漏洞
- 2024-07-17王道4S管理系统PeiJianFuncWebService存在SQL注入漏洞
- 2024-05-31Naviwebs Navigate CMS 认证绕过漏洞
- 2024-05-09IP-guard WebServer mApplyList 权限绕过漏洞
- 2024-03-26IP-guard WebServer view.php任意文件读取漏洞
- 2024-03-14疑似漏洞扫描流量 - Webscan.360
- 2024-03-14疑似漏洞扫描流量 - Webscan.360
- 2024-03-14疑似漏洞扫描流量 - Webscan.360
- 2024-03-14疑似漏洞扫描流量 - Webscan.360
- 2024-02-29Naviwebs Navigate CMS 任意文件上传漏洞
- 2024-02-22Ecommece Website CVE-2022-27346 任意文件上传漏洞
- 2023-11-10IP-guard WebServer view.php 远程命令执行漏洞
- 2023-11-10IP-guard WebServer view.php 远程命令执行漏洞
- PoC2023-11-09IP-guard WebServer 远程命令执行漏洞
- 2023-11-09IP-guard WebServer view.php任意文件读取漏洞
- 2023-10-16极通EWEBS 存在反射型xss
- 2023-02-12IBM WebSphere Application Server 存在远程代码执行漏洞
- 2023-01-29BOA Webserver 文件读取(CVE-2017-9833)
- 2023-01-06IBM WebSphere服务端ssrf（CVE-2021-27748）
- 2022-06-13WordPress plugin Elementor Website 跨站脚本漏洞
- 2022-04-19(CVE-2022-1329) WordPress Elementor Website Builder 权限校验漏洞
- 2022-03-21新华通工程质量检测试验中心网上委托系统XhtAppWebSet.ashx SQL注入漏洞
- 2022-01-10GeoWebServer 任意文件读取
- 2021-12-01Onlyit-WebServer文件遍历漏洞
- 2021-06-18极通EWEBS casmain.xgi 任意文件读取漏洞
- 2021-02-26IBM WebSphere Application Server Portal 存在 SSRF 漏洞
- 2021-01-19WebSphere敏感文件读取漏洞(CVE-2019-4505)
- 2021-01-19web service监控-未授权访问
- 2021-01-19webSchool_list_aspx-SQL注入
- 2021-01-19V2会议系统BroadcastWebservice-SQL注入
- 2021-01-19Loopcomm WLAN AP Webserver-未授权访问
- 2021-01-19KWS-1040N WLAN AP Webserver路由器-未授权访问
- 2021-01-19KWS-1040N WLAN AP Webserver路由器-默认口令
- 2021-01-19EWEBS平台 testweb.php-文件信息泄漏
- 2021-01-19极通EWEBS应用虚拟化系统-任意文件下载
- 2020-08-13IBM WebSphere Application Server 存在远程代码执行漏洞
- 2020-08-03IBM WebSphere Application Server 存在远程代码执行漏洞
- 2020-07-17IBM WebSphere Application Server 存在远程代码执行漏洞
- 2020-06-06IBM WebSphere Application Server IIOP 协议存在远程代码执行漏洞
- 2020-03-26IBM WebSphere Application Server SOAP Connector 存在远程代码执行漏洞
- 2019-05-18IBM WebSphere Application Server 存在远程代码执行漏洞
- 2016-10-05IBM WebSphere Application Server 存在远程代码执行漏洞
- 2014-10-29IBM WebSphere Portal 远程代码执行漏洞
- 2014-02-14IBM WebSphere Portal 任意文件上传漏洞
- 2011-02-15WebSCADA多个产品cgi-bin/read.cgi远程代码执行漏洞
- 商之器科技｜Uniweb/SoliPACS WebServer - 存在2個漏洞
- 商之器科技 Uniweb/SoliPACS WebServer - SQL Injection
- ASUS WebStorage - Use of Hard-coded Credentials