Ack Vulnerabilities
220 vulnerabilities related to Ack
- PoC2026-08-25CVE-2026-12898: All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write
- PoC2026-08-18package-json: NPM package.json Disclosure
- PoC2026-08-16CVE-2024-56064: WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCE
- PoC2026-08-16CVE-2025-13528: Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export
- 2026-06-03CentreStack 本地文件包含漏洞(CVE-2025-11371)
- 2026-04-30Apache CloudStack /client/api/ 默认口令漏洞
- PoC2026-04-09CVE-2023-7165: JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing
- 2026-03-27Gladinet CentreStack & Triofox /storage/filesvr.dn 文件读取漏洞（CVE-2025-14611）
- PoC2026-03-25CVE-2026-1357: WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload
- PoC2026-02-27CVE-2022-44588: Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection
- 2026-02-09易宇通 kingtrans物流管理系统WebTrack billid参数存在SQL注入漏洞
- PoC2026-01-27CVE-2020-16248: Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)
- PoC2026-01-24ovhcloud-backup-config: OVHcloud Backup Configuration - Exposure
- PoC2026-01-24servicestack-requestlogs: ServiceStack Request Logs - Unauthenticated Access
- PoC2026-01-16wp-all-in-one-seo-pack-fpd: WordPress All in One SEO Pack - Full Path Disclosure
- PoC2026-01-16wp-jetpack-fpd: JetPack - Full Path Disclosure
- PoC2026-01-09wp-jetpack-ssrf: Wordpress Jetpack plugin - Server Side Request Forgery
- PoC2026-01-08CVE-2023-6266: WordPress Backup Migration <= 1.3.6 - Path Traversal
- PoC2026-01-08CVE-2023-7164: WordPress BackWPup < 4.0.4 - Backup File Disclosure
- PoC2026-01-08CVE-2025-14611: Gladinet CentreStack & Triofox - Hardcoded Credentials
- PoC2026-01-08jetpack-stored-xss: Jetpack < 6.5 - Stored Cross-Site Scripting
- PoC2026-01-08wp-all-in-one-seo-pack-fpd: WordPress All in One SEO Pack - Full Path Disclosure
- PoC2026-01-08wp-jetpack-fpd: JetPack - Full Path Disclosure
- 2025-12-16（CVE-2023-53891）Blackcat CMS 1.4存储型跨站脚本漏洞
- 2025-12-16（CVE-2023-53892）Blackcat CMS 1.4远程代码执行漏洞
- PoC2025-12-12x-backend-server-header-detect: X-Backend-Server Header - Exposure
- 2025-12-12（CVE-2025-14611）Gladinet CentreStack和Triofox AES加密硬编码漏洞导致任意文件包含及安全降级
- PoC2025-12-02CVE-2023-5815: News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion
- PoC2025-12-02blackbox-exporter-exposure: Blackbox Exporter - Exposure
- PoC2025-12-02memtracker-exposure: MemTracker - Exposure
- 2025-11-03Gladinet CentreStack & TrioFox /storage/t.dn 目录遍历漏洞（CVE-2025-11371）
- 2025-11-03Gladinet CentreStack & TrioFox /storage/t.dn 目录遍历漏洞（CVE-2025-11371）
- 2025-09-08Apache Jackrabbit 代码注入漏洞
- 2025-09-01backup-files: Compressed Backup File - Detect
- PoC2025-08-01CVE-2025-25062: Backdrop CMS - Cross-Site Scripting
- PoC2025-08-01CVE-2010-1478: Joomla! Component Jfeedback 1.2 - Local File Inclusion
- PoC2025-08-01CVE-2014-3206: Seagate BlackArmor NAS - Command Injection
- PoC2025-08-01CVE-2016-1000136: WordPress heat-trackr 1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-18500: Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-16846: SaltStack <=3002 - Shell Injection
- PoC2025-08-01CVE-2020-9547: FasterXML jackson-databind - Deserialization Remote Code Execution
- PoC2025-08-01CVE-2020-9548: FasterXML Jackson Databind <=2.9.10.4 - Remote Code Execution
- PoC2025-08-01CVE-2021-20038: SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution
- PoC2025-08-01CVE-2021-24155: WordPress BackupGuard <1.6.0 - Authenticated Arbitrary File Upload
- PoC2025-08-01CVE-2021-24991: WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-25003: WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution
- PoC2025-08-01CVE-2021-25281: SaltStack Salt <3002.5 - Auth Bypass
- PoC2025-08-01CVE-2021-28918: Netmask NPM Package - Server-Side Request Forgery
- PoC2025-08-01CVE-2022-24384: SmarterTools SmarterTrack - Cross-Site Scripting
- PoC2025-08-01CVE-2022-2863: WordPress WPvivid Backup <0.9.76 - Local File Inclusion
- PoC2025-08-01CVE-2022-31474: BackupBuddy - Local File Inclusion
- PoC2025-08-01CVE-2022-40083: Labstack Echo 4.8.0 - Open Redirect
- PoC2025-08-01CVE-2022-4059: Cryptocurrency Widgets Pack < 2.0 - SQL Injection
- PoC2025-08-01CVE-2022-42094: Backdrop CMS version 1.23.0 - Stored Cross Site Scripting
- PoC2025-08-01CVE-2022-42095: Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)
- PoC2025-08-01CVE-2022-42096: Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)
- PoC2025-08-01CVE-2022-4897: WordPress BackupBuddy <8.8.3 - Cross Site Scripting
- PoC2025-08-01CVE-2023-40755: PHPJabbers Callback Widget v1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-6553: Worpress Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
- PoC2025-08-01CVE-2024-12209: WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion
- PoC2025-08-01CVE-2024-41107: Apache CloudStack - SAML Signature Exclusion
- PoC2025-08-01CVE-2024-48248: NAKIVO Backup and Replication Solution - Unauthenticated Arbitrary File Read
- PoC2025-08-01CVE-2024-50477: WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass
- PoC2025-08-01CVE-2025-30406: Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE
- PoC2025-08-01CVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload
- 2025-08-01CVE-2024-40711: Veeam Backup & Replication - Unauthenticated
- PoC2025-08-01CVE-2020-16846: SaltStack Shell Injection
- PoC2025-08-01CVE-2021-25282: SaltStack Salt Unautherenticated Remote Command Execution
- PoC2025-08-01CVE-2021-40247: Budget and Expense Tracker System SQL注入 - 绕过B&E Tracker登录CVE-2021-40247
- PoC2025-08-01ack-cluster-api-public: Public Access to ACK Cluster's API Server - Enabled
- PoC2025-08-01ack-cluster-cloud-monitor-disable: Cloud Monitor for ACK Clusters - Disable
- PoC2025-08-01ack-cluster-health-disable: ACK Clusters Check - Disable
- PoC2025-08-01ack-cluster-network-policies-disable: Enforced Cluster Support for Network Policies - Disabled
- PoC2025-08-01ack-cluster-network-policies-missing: Cluster Support for Network Policies - Missing
- PoC2025-08-01cache-automatic-backups-disabled: ElastiCache Automatic Backups - Disabled
- PoC2025-08-01CVE-2024-48248: NAKIVO Backup & Replication任意文件读取漏洞
- PoC2025-08-01stackstorm-default-login: StackStorm Default Login
- PoC2025-08-01aspcms-backend-leak: ASPCMS Backend Leak
- PoC2025-08-01gcloud-backend-bucket-missing-storage: Backend Buckets Referencing Missing Storage Buckets
- PoC2025-08-01gcloud-cdn-backend-bucket: Check Cloud CDN Backend Bucket Configuration
- PoC2025-08-01gcloud-lb-backend-unsecured: Unsecured Backend Services in Google Cloud Load Balancers
- PoC2025-08-01metadata-service-openstack: Openstack Metadata Service Check
- PoC2025-08-01service-pack-check: Latest Service Pack Check
- PoC2025-08-01openstack-config: Openstack - Infomation Disclosure
- PoC2025-08-01openstack-user-secrets: OpenStack User Secrets Exposure
- PoC2025-08-01php-zerodium-backdoor: PHP zerodium后门漏洞
- PoC2025-08-01stackexchange-api-csp-bypass: Content-Security-Policy Bypass - StackExchange API
- PoC2025-08-01adb-backup-enabled: ADB Backup Enabled
- PoC2025-08-01slack-api: Slack API Key
- PoC2025-08-01slack-webhook: Slack Webhook
- PoC2025-08-01stackhawk-api-key: StackHawk API Key
- PoC2025-08-01webpack-sourcemap: Webpack Sourcemap
- PoC2025-08-01CVE-2024-40711: Veeam Backup & Replication - Unauthenticated
- PoC2025-08-01CVE-2025-11371: Gladinet CentreStack & TrioFox - Local File Inclusion
- PoC2025-08-01cloudstack-default-login: Apache CloudStack - Default Login
- PoC2025-08-01chirpstack-default-login: ChirpStack - Default Login
- PoC2025-08-01digitalrebar-default-login: RackN Digital Rebar Default Login
- PoC2025-08-01hp-printer-default-login: Hewlett Packard LaserJet Printer - Default Login
- PoC2025-08-01stackstorm-default-login: StackStorm Default Login
- PoC2025-08-01backup-directory-listing: Backup Directory Listing - Detect
- PoC2025-08-01zip-backup-files: Compressed Backup File - Detect
- PoC2025-08-01openstack-user-secrets: OpenStack User Secrets Exposure
- PoC2025-08-01slack-bot-token: Slack Bot token
- PoC2025-08-01slack-user-token: Slack User token disclosure
- PoC2025-08-01stackhawk-api: StackHawk API Key
- PoC2025-08-01dlink-n300-backup: DSL-124 Wireless N300 ADSL2+ - Backup File Disclosure
- PoC2025-08-01express-stack-trace: Express Stack Trace
- PoC2025-08-01cubebackup-setup-installer: CubeBackup Setup Page - Exposure
- PoC2025-08-01jackett-installer: Jackett - Installer
- PoC2025-08-01stackposts-installer: StackPosts Installation Page - Exposure
- PoC2025-08-01xbackbone-installer: XBackBone Installer - Exposure
- PoC2025-08-01jackett-unauth: Jackett UI - Unauthenticated
- PoC2025-08-01oneinstack-control-center: OneinStack Control Center Dashboard - Detect
- PoC2025-08-01openstack-config: Openstack - Infomation Disclosure
- PoC2025-08-01metadata-service-openstack: Openstack Metadata Service Check
- PoC2025-08-01rack-mini-profiler: rack-mini-profiler - Environment Information Disclosure
- PoC2025-08-01tomcat-stacktraces: Tomcat Stack Traces Enabled
- PoC2025-08-01antsword-backdoor: AntSword Backdoor Detection
- PoC2025-08-01php-zerodium-backdoor-rce: PHP 8.1.0-dev - Backdoor Remote Code Execution
- PoC2025-08-01xmlrpc-pingback-ssrf: XMLRPC Pingback SSRF
- PoC2025-08-01parentlink-xss: Blackboard - Cross-Site Scripting
- PoC2025-08-01stackposts-sqli: Stackposts Social Marketing Tool v1.0 - SQL Injection
- PoC2025-08-01jolokia-logback-jndi-rce: Jolokia Logback JNDI - Remote Code Execution
- PoC2025-08-01blog-designer-pack-rce: News & Blog Designer Pack < 3.4.2 - Remote Code Execution
- PoC2025-08-01woocommerce-pdf-invoices-xss: WordPress WooCommerce PDF Invoices & Packing Slips <2.15.0 - Cross-Site Scripting
- PoC2025-08-01wordpress-db-backup-listing: WordPress DB Backup
- PoC2025-08-01wordpress-db-backup: WordPress DB Backup
- PoC2025-08-01wordpress-social-metrics-tracker: Social Metrics Tracker <= 1.6.8 - Unauthorised Data Export
- PoC2025-08-01wordpress-total-upkeep-backup-download: WordPress Total Upkeep Database and Files Backup Download
- PoC2025-08-01CVE-2021-27877: Veritas Backup Exec - Broken Authentication
- PoC2025-08-01openstack-dashboard-login: OpenStack Dashboard Login Panel - Detect
- 2025-07-03(CVE-2025-5961) WPvivid备份与迁移插件任意文件上传漏洞
- 2025-06-20Gladinet CentreStack /portal/loginpage.aspx 代码执行漏洞（CVE-2025-30406）
- 2025-06-20zip-backup-files 信息泄露漏洞
- 2025-06-20PHP backup 信息泄露漏洞
- 2025-06-20zip-backup-files 信息泄露漏洞
- 2025-06-20Gladinet CentreStack /portal/loginpage.aspx 代码执行漏洞（CVE-2025-30406）
- 2025-06-20PHP backup 信息泄露漏洞
- 2025-04-15CentreStack 存在反序列化漏洞（CVE-2025-30406）
- 2025-04-11Hewlett Packard Enterprise AOS 操作系统命令注入漏洞
- 2025-04-11Hewlett Packard Enterprise AOS 操作系统命令注入漏洞
- 2025-04-04（CVE-2025-30406）Gladinet CentreStack反序列化漏洞
- 2025-03-31（CVE-2025-3014）NightWolf Penetration Testing Tracking 2.1.4不安全的直接对象引用漏洞
- 2025-02-27NAKIVO Backup & Replication任意文件读取漏洞
- 2025-02-18云网oa WXCallBack 存在xxe漏洞
- 2025-01-17WordPress plugin Background Control 跨站请求伪造漏洞
- 2025-01-07jackson-databind 反序列化漏洞（shiro gadget）
- 2025-01-07jackson-databind 反序列化漏洞（spring gadget）
- 2024-12-311000 Projects Attendance Tracking Management System 注入漏洞
- 2024-12-04Apache Arrow R Package 反序列化漏洞 可致远程代码执行
- 2024-11-07WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞
- 2024-11-07WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞
- 2024-11-04WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞
- 2024-11-04WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞
- 2024-10-11Veeam Backup & Replication 未授权 反序列化漏洞 可致远程代码执行
- 2024-09-08Veeam Backup & Replication 安全漏洞
- 2024-08-15FasterXML jackson-databind 远程代码执行漏洞
- 2024-08-07Artica Proxy Loopback服务认证绕过漏洞
- 2024-08-03SourceCodester Tracking Monitoring Management System SQL注入漏洞
- 2024-08-03SourceCodester Tracking Monitoring Management System SQL注入漏洞
- 2024-07-18Black Box KVM Firmware 目录遍历漏洞
- 2024-07-09Apache CloudStack 初始化不当漏洞
- 2024-07-09Apache CloudStack 未授权 命令注入漏洞
- 2024-07-07Apache CloudStack 代码注入漏洞
- 2024-06-29Saltstack 需授权 路径遍历漏洞
- 2024-06-17BackupBuddy 存在本地文件包含漏洞（CVE-2022-31474）
- 2024-06-11GitStack 远程命令执行漏洞（CVE-2018-5955）
- 2024-06-04OpenStack 弱口令漏洞
- 2024-05-20Simple Image Stack Website 跨站脚本漏洞
- 2024-05-07Aspera Faspex relay_package 远程代码执行漏洞（CVE-2022-47986）
- 2024-04-26Vinchin Backup and Recovery CVE-2024-25228 命令注入漏洞
- 2024-04-11SourceCodester Daily Habit Tracker CVE-2024-2075 存储型跨站脚本漏洞
- 2024-04-07浪擎 DAYS灾备 execp2vbackup 存在任意文件上传漏洞
- 2024-03-29Veeam Backup and Replication身份验证绕过漏洞
- 2024-02-29JetBrains YouTrack 模板注入漏洞
- 2024-02-22vm2 prepareStackTrace 沙箱逃逸漏洞
- 2024-02-22BACKCLICK CVE-2022-44003 SQL注入漏洞
- 2024-02-22Linux Kernel TIPC Stack 缓冲区溢出漏洞
- 2024-02-22PrinterLogic Web Stack CVE-2021-42631远程代码执行漏洞
- 2024-02-22BACKCLICK Professional 远程代码执行漏洞
- 2024-02-22WordPress WPvivid Backup插件class-wpvivid-export-import目录遍历漏洞
- 2024-02-07Apache Jackrabbit CVE-2023-37895 远程代码执行漏洞
- 2024-02-07Apache Jackrabbit CVE-2023-37895 远程代码执行漏洞
- 2024-02-07VinChin Backup Recovery 认证绕过漏洞
- 2024-02-07VinChin Backup Recovery 命令注入漏洞
- 2024-02-01TanStack Query 跨站脚本漏洞
- 2024-01-18FasterXML jackson-databind 远程代码执行漏洞
- 2023-11-04WPN-XM Serverstack 跨站脚本漏洞
- 2023-10-16用友-移动系统管理 backup SQL注入漏洞
- 2023-07-28OpenStack openstack-neutron 资源管理错误漏洞
- 2023-07-28Apache Jackrabbit RMI 远程代码执行漏洞
- 2023-07-28（CVE-2023-3977）WordPress多款插件跨站请求伪造漏洞
- 2023-07-25Apache Jackrabbit 反序列化漏洞(CVE-2023-37895)
- 2023-07-24Bug Finder MineStack 跨站脚本漏洞
- 2023-03-23GitStack /rest/repository/ 路径存在鉴权绕过
- 2023-03-23GitStack /rest/repository/ 路径存在敏感信息泄露
- 2022-10-11Microsoft多个产品权限管理不当漏洞(CVE-2022-37968)
- 2022-07-29Apache CloudStack SAML XXE漏洞
- 2022-03-08Zstack Clound存在信息泄露漏洞
- 2021-08-16SaltStack salt-api wheel_async未授权访问(CVE-2021-25281)
- 2021-03-22SaltStack任意文件写入(CVE-2021-25282)
- 2021-01-19SaltStack未授权访问及命令执行(CVE-2020-16846,CVE-2020-25592)
- 2021-01-19SaltStack 存在目录遍历漏洞（CVE-2020-11652）
- 2021-01-19SaltStack 存在认证绕过漏洞（CVE-2020-11651）
- 2021-01-19BlackburnGraphics-SQL注入
- 2021-01-19backuppc-未授权访问
- 2021-01-19GitStack可视化应用的user页面-用户信息泄漏
- 2021-01-19gps-server GPS Tracking Software < 3.1-密码重置(CVE-2017-17097)
- 2020-05-15Apache CloudStack baremetal组件输入验证错误漏洞
- 2020-05-01SaltStack Salt Master 认证绕过致远程代码执行漏洞
- 2016-04-14Xen PV Backend Driver 远程代码执行漏洞
- 2016-02-09Apache CloudStack 信息泄露漏洞
- 2016-02-09Apache CloudStack 信任管理漏洞
- 2015-05-29Dell NetVault Backup libnv6模块远程代码执行漏洞
- 2014-05-23Apache CloudStack和Citrix CloudPlatform 安全绕过漏洞
- 2013-12-15Ack 远程代码执行漏洞
- 2013-08-20Apache CloudStack 多个跨站脚本漏洞
- 2013-01-23Apache CloudStack 本地信息泄露漏洞
- 2012-10-26Citrix Cloud.com CloudStack/Apache CloudStack pre-release 权限许可和访问控制漏洞
- 2011-06-01Walrus_Digit WalRack文件扩展处理任意文件上传漏洞