Cal Vulnerabilities
127 vulnerabilities related to Cal
- PoC2026-08-18CVE-2026-6854: My Calendar < 3.7.9 - Unauthenticated SQL Injection
- PoC2026-08-16CVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information Disclosure
- 2026-07-20Citrix-NetScaler /saml/login 信息泄露漏洞（CVE-2026-8451）
- 2026-05-29Citrix NetScaler ADC SAML IDP /wsfed/passive 信息泄露漏洞（CVE-2026-3055）
- PoC2026-05-09CVE-2026-40308: My Calendar WordPress Plugin - Information Disclosure
- PoC2026-04-09CVE-2026-3055: Citrix NetScaler SAML IDP - Memory Overread
- 2026-04-01Citrix NetScaler 内存越界读取漏洞
- PoC2026-03-25CVE-2024-43144: Cost Calculator Builder <= 3.2.15 - SQL Injection
- PoC2026-03-25CVE-2026-32583: Webnus Inc. Modern Events Calendar - Broken Access Control
- PoC2026-02-24CVE-2024-13099: Widget4Call WordPress - Cross-Site Scripting
- 2026-02-04杭州新中大科技股份有限公司netcallServer管理控制台存在未授权访问漏洞
- PoC2026-02-03CVE-2024-5333: WordPress Events Calendar 6.8.2.1 - Information Disclosure
- PoC2026-01-16google-calendar-exposure: Google Calendar - Exposure
- PoC2026-01-16wp-call-now-button-fpd: WordPress Call Now Button - Full Path Disclosure
- 2026-01-15Cal.com /api/auth/session 权限绕过漏洞（CVE-2026-23478）
- 2026-01-15Cal.com /api/auth/session 权限绕过漏洞（CVE-2026-23478）
- PoC2026-01-08CVE-2015-8350: WordPress Calls to Action <=2.4.3 - Authenticated Reflected XSS
- PoC2026-01-08CVE-2025-9808: The Events Calendar <= 6.15.2 - Information Disclosure
- PoC2026-01-08wp-the-events-calendar-fpd: WordPress The Events Calendar - Full Path Disclosure
- PoC2026-01-08wp-caldera-forms-xss: Caldera Forms <= 1.5.4 - Cross-Site Scripting
- PoC2025-12-12CVE-2022-0879: Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting
- 2025-11-27Anyscale Ray 未授权 代码注入漏洞
- 2025-11-27Anyscale Ray 未授权 代码注入漏洞
- 2025-11-11（CVE-2025-12101）NetScaler ADC和Gateway配置为网关或AAA虚拟服务器时的跨站脚本漏洞
- 2025-10-27（CVE-2025-5777）Citrix NetScaler管理接口输入验证不足导致内存读取越界漏洞
- 2025-08-17Code-Projects Medical Store Management System 注入漏洞
- PoC2025-08-01CVE-2025-5777: Citrix NetScaler Memory Disclosure - CitrixBleed 2
- PoC2025-08-01CVE-2012-1835: WordPress Plugin All-in-One Event Calendar 1.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2012-4242: WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2015-2196: WordPress Spider Calendar <=1.4.9 - SQL Injection
- PoC2025-08-01CVE-2019-15713: WordPress My Calendar <= 3.1.9 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-29395: Wordpress EventON Calendar 3.0.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-8194: Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection
- PoC2025-08-01CVE-2021-24145: WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload
- PoC2025-08-01CVE-2021-24146: WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure
- PoC2025-08-01CVE-2021-24498: WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-24510: WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-24943: Registrations for the Events Calendar < 2.7.6 - SQL Injection
- PoC2025-08-01CVE-2021-24946: WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection
- PoC2025-08-01CVE-2021-27330: Triconsole Datepicker Calendar <3.77 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-0212: WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-1007: WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-2314: WordPress VR Calendar <=2.3.2 - Remote Code Execution
- PoC2025-08-01CVE-2022-3982: WordPress Booking Calendar <3.2.2 - Arbitrary File Upload
- PoC2025-08-01CVE-2022-4320: WordPress Events Calendar <1.4.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-40755: PHPJabbers Callback Widget v1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-4110: PHPJabbers Availability Booking Calendar 5.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-48022: Anyscale Ray - Remote Code Execution
- PoC2025-08-01CVE-2023-48023: Anyscale Ray 2.6.3 and 2.8.0 - Server-Side Request Forgery
- PoC2025-08-01CVE-2023-6360: WordPress My Calendar <3.4.22 - SQL Injection
- PoC2025-08-01CVE-2024-32709: WP-Recall <= 16.26.5 - SQL Injection
- PoC2025-08-01CVE-2024-4257: BlueNet Technology Clinical Browsing System 1.2.1 - Sql Injection
- PoC2025-08-01CVE-2024-6095: LocalAI - Partial Local File Read
- PoC2025-08-01CVE-2024-6235: NetScaler Console - Sensitive Information Disclosure
- PoC2025-08-01CVE-2024-6781: Calibre <= 7.14.0 Arbitrary File Read
- PoC2025-08-01CVE-2024-6782: Calibre <= 7.14.0 Remote Code Execution
- PoC2025-08-01CVE-2024-7008: Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS)
- PoC2025-08-01CVE-2025-1323: WP-Recall – Plugin <= 16.26.10 - Unauthenticated SQL Injection
- PoC2025-08-01CVE-2021-24876: Registrations for The Events Calendar < 2.7.5 - Authenticated Reflected Cross-Site Scripting
- PoC2025-08-01CVE-2022-3982: WordPress Booking Calendar <3.2.2 - Arbitrary File Upload
- PoC2025-08-01eks-logging-kubes-api-calls: Enable CloudTrail Logging for Kubernetes API Calls
- PoC2025-08-01azure-vmss-empty-unattached: Azure Virtual Machine Scale Sets Empty and Unattached
- PoC2025-08-01dbappsecurity-mingyu-aaa-portal-auth-local-submit-rce: 安恒 明御安全网关 aaa_portal_auth_local_submit 远程命令执行漏洞
- PoC2025-08-01k8s-allow-privilege-escalation-set: Containers run with allowPrivilegeEscalation enabled
- PoC2025-08-01ethicalads-server-csp-bypass: Content-Security-Policy Bypass - EthicalAds Server
- PoC2025-08-01CVE-2023-3519: Citrix NetScaler ADC and NetScaler Gateway - Remote Code Execution
- PoC2025-08-01CVE-2023-6549: Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read
- PoC2025-08-01call-com-installer: Call.com Setup Page - Exposure
- PoC2025-08-01webcalendar-install: WebCalendar Exposed Installation
- PoC2025-08-01open-proxy-localhost: Open Proxy to Other Web Ports via Proxy's localhost Interface
- PoC2025-08-01cucm-username-enumeration: Cisco Unified Communications Manager - User Enumeration
- PoC2025-08-01advanced-booking-calendar-sqli: Advanced Booking Calendar < 1.6.2 - SQL Injection
- PoC2025-08-01CVE-2019-12989: Citrix SD-WAN and NetScaler SD-WAN - SQL Injection
- PoC2025-08-01CVE-2024-4180: The Events Calendar < 6.4.0.1 - Cross-site Scripting
- 2025-07-12（CVE-2021-4458）Modern Events Calendar Lite插件SQL注入漏洞
- 2025-07-07NetScaler ADC&NetScaler Gateway存在内存泄漏漏洞(CVE-2025-5777)
- 2025-06-20Citrix NetScaler ADC 和 Citrix NetScaler Gateway 访问控制不当漏洞
- 2025-06-17（CVE-2025-5349）Citrix NetScaler ADC和Gateway管理接口权限验证不足漏洞
- 2025-05-08（CVE-2025-3419）WordPress Eventin插件任意文件读取漏洞
- 2025-05-03（CVE-2025-4172）VerticalResponse Newsletter Widget插件存储型跨站脚本漏洞
- 2025-04-25NetScaler Console /internal/v2/config/mps_secret/ADM_SESSIONID 权限绕过漏洞（CVE-2024-6235）
- 2025-04-25NetScaler Console /internal/v2/config/mps_secret/ADM_SESSIONID 权限绕过漏洞（CVE-2024-6235）
- 2025-04-15Calibre <= 7.15.0 XSS漏洞(CVE-2024-7008)
- 2025-04-03Calibre /cdb/cmd/list 代码执行漏洞（CVE-2024-6782）
- 2025-04-03Calibre /cdb/cmd/list 代码执行漏洞（CVE-2024-6782）
- 2025-02-18云网oa WXCallBack 存在xxe漏洞
- 2025-01-27WordPress plugin Booking Calendar Contact Form 跨站脚本漏洞
- 2025-01-18WordPress plugin GravatarLocalCache 跨站请求伪造漏洞
- 2024-12-26WordPress plugin Booking Calendar WpDevArt SQL注入漏洞
- 2024-11-12Siemens多款产品 注入漏洞 CVE-2024-50572
- 2024-11-08Calibre /cdb/cmd/export 文件读取漏洞（CVE-2024-6781）
- 2024-11-08Calibre /cdb/cmd/export 文件读取漏洞（CVE-2024-6781）
- 2024-10-11杭州新中大科技股份有限公司netcallServer未授权访问致信息泄露漏洞
- 2024-10-11杭州新中大科技股份有限公司netcallServer弱口令漏洞
- 2024-08-21Justcall集时通讯呼叫中心系统弱口令
- 2024-08-20Calibre CVE-2024-7008反射型跨站脚本漏洞
- 2024-08-20Calibre cmd list 远程代码执行漏洞
- 2024-08-20Calibre cmd export 任意文件读取漏洞
- 2024-08-08Calibre 低于 7.14.0 版本存在任意文件读取漏洞(CVE-2024-6781)
- 2024-08-08Calibre /cdb/cmd/export 任意文件读取漏洞
- 2024-08-07Calibre 远程代码执行(CVE-2024-6782)
- 2024-04-03Anyscale Ray CVE-2023-48022 远程代码执行漏洞
- 2024-04-03Anyscale Ray CVE-2023-48022 远程代码执行漏洞（恶意文件上传）
- 2024-04-03Anyscale Ray CVE-2023-48023 服务端请求伪造漏洞
- 2024-03-30Dell PowerScale OneFS 日志信息泄露漏洞
- 2024-03-29Canonical ksmbd-tools ksmbd.mountd smb_read_sid 堆缓冲区溢出漏洞
- 2024-03-21Canonical ksmbd-tools ksmbd.mountd ndr_write_bytes 堆缓冲区溢出漏洞
- 2024-02-22Musical World CVE-2022-27064 任意文件上传漏洞
- 2024-02-22Advanced Booking Calendar WordPress plugin反射型跨站脚本漏洞
- 2024-02-22WordPress 插件 VR Calendar CVE-2022-2314 任意代码执行漏洞
- 2023-11-14Siemens多个产品安全漏洞(CVE-2023-44317)
- 2023-10-30NetScaler ADC&NetScaler Gateway敏感信息泄露漏洞(CVE-2023-4966)
- 2023-07-19Citrix ADC/Citrix Gateway 远程代码执行漏洞(CVE-2023-3519)
- 2023-07-05MechanicalSoup 任意文件读取漏洞(CVE-2023-34457)
- 2023-06-01杭州新中大 NetcallServer 管理控制台默认口令
- 2023-06-01杭州新中大 NetcallServer 管理控制台默认口令
- 2023-04-26WordPress booking-calendar 插件 admin-ajax.php 任意文件上传漏洞（CVE-2022-3982）
- 2023-04-26WordPress booking-calendar 插件 admin-ajax.php 任意文件上传漏洞（CVE-2022-3982）
- 2023-01-09VR Calendar低于2.3.2版本存在未经验证的任意函数调用漏洞(CVE-2022-2314)
- 2022-04-12siemens多个产品 未正确校验输入漏洞
- 2022-04-12siemens多个产品 条件竞争漏洞
- 2021-03-25新中大科技netcall server管理控制台 默认密码漏洞
- 2021-01-19justcall集时通讯呼叫中心系统 userweb/index.php-SQL注入C
- 2021-01-19justcall集时通讯呼叫中心系统 userweb/index.php-SQL注入A
- 2021-01-19justcall集时通讯呼叫中心系统 action=superLogin 后门
- 2021-01-19justcall集时通讯呼叫中心系统 userweb/index.php-SQL注入B
- 2013-09-17IBM SPSS Analytical Decision Management 任意文件上传漏洞