T+ 漏洞列表
共找到 200 个与 T+ 相关的漏洞
📅 加载漏洞趋势中...
- 2025-11-21TVT 数码科技 NVMS-1000 / 文件读取漏洞
- 2025-11-21KINGOSOFT高校智慧校园教学综合服务平台 /jw/lessonchangeapply/jwComFileDownload.action 文件读取漏洞
- 2025-11-21N-central /dms/services/ServerMMS XML 外部实体注入漏洞（CVE-2025-11700）
- 2025-11-21Tplay-cms /admin/common/upload 文件上传漏洞
- 2025-11-21Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞（CVE-2025-64446/CVE-2025-58034）
- POC 2025-11-21CVE-2018-13317: TOTOLINK A3002RU 1.0.8 - Information Disclosure
- POC 2025-11-21CVE-2019-19822: TOTOLINK/Realtek Routers - Information Disclosure
- POC 2025-11-21CVE-2019-19823: TOTOLINK/Realtek Routers - Information Disclosure
- POC 2025-11-21CVE-2019-19825: TOTOLINK/Realtek Routers - CAPTCHA Bypass
- POC 2025-11-21CVE-2021-34427: Eclipse BIRT Viewer - Remote Code Execution
- POC 2025-11-21CVE-2025-11700: N-central - XML External Entities Injection
- POC 2025-11-21CVE-2025-49706: Microsoft SharePoint Server - Authentication Bypass
- POC 2025-11-21CVE-2025-55523: Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download
- POC 2025-11-21CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass
- POC 2025-11-21CVE-2025-9316: N-central - Authentication Bypass
- POC 2025-11-21vtigercrm-default-login: Vtiger CRM - Default Login
- POC 2025-11-21vtigercrm-exposed-directory: Vtiger CRM - Exposed Directory
- POC 2025-11-21wp-security-hidden-login-exposure: WordPress All-in-One Security <=4.4.1 - Hidden Login Page Exposure
- 2025-11-20AstrBot 存在未授权访问漏洞
- 2025-11-18AstrBot /api/plugin/install-upload 命令执行漏洞（CVE-2025-55449）
- POC 2025-11-18CVE-2025-64446: FortiWeb - Authentication Bypass
- 2025-11-17Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞（CVE-2025-64446）
- 2025-11-17Fortiweb 存在路径穿越漏洞（CVE-2025-64446）
- 2025-11-15（CVE-2025-4617）Palo Alto Networks Prisma Browser截图控制绕过漏洞
- 2025-11-15（CVE-2025-4618）Palo Alto Networks Prisma Browser敏感信息泄露漏洞
- POC 2025-11-15Fortinet FortiWeb 未授权身份验证绕过漏洞（CVE-2025-64446）
- POC 2025-11-14CVE-2021-4374: WordPress Automatic Plugin - Unauthenticated Options Change
- POC 2025-11-14CVE-2024-8852: All-in-One WP Migration < 7.87 - Unauthenticated Information Disclosure
- POC 2025-11-14erpnext-default-login: ERPNext - Default Login
- 2025-11-14Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)
- 2025-11-14NetMizer 日志管理系统 /data/chart/hostdelay.php 命令执行漏洞
- 2025-11-14DbGate /runners/load-reader 文件读取漏洞（CVE-2025-50185）
- 2025-11-14DbGate /uploads/get 目录遍历漏洞（CVE-2025-50184）
- 2025-11-14School Fees Payment System /student.php SQL 注入漏洞（CVE-2025-6403）
- 2025-11-14TDuck /login/account 默认口令漏洞
- 2025-11-14Agent-Zero /download_work_dir_file 文件读取漏洞（CVE-2025-55523）
- 2025-11-14MapTiler-Tileserver-php /tileserver.php/x/1/1/1 目录遍历漏洞（CVE-2025-44137）
- POC 2025-11-12CVE-2025-12480: Triofox - Improper Access Control
- POC 2025-11-11CVE-2024-50857: GestioIP - Reflected Cross-Site Scripting
- POC 2025-11-11CVE-2025-31486: Vite server.fs.deny Bypass - Local File Inclusion
- POC 2025-11-11cl-te-http-smuggling: Basic CL.TE - HTTP request smuggling
- POC 2025-11-11te-cl-http-smuggling: Basic TE.CL - HTTP Request Smuggling
- 2025-11-11（CVE-2025-12101）NetScaler ADC和Gateway配置为网关或AAA虚拟服务器时的跨站脚本漏洞
- 2025-11-10（CVE-2025-12480）Triofox初始设置页面访问控制漏洞
- POC 2025-11-07CVE-2024-0799: Arcserve Unified Data Protection - Authentication Bypass
- POC 2025-11-07CVE-2024-0801: Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll
- POC 2025-11-07CVE-2024-28623: RiteCMS 3.0.0 - Cross-site Scripting
- POC 2025-11-07CVE-2025-1302: JSONPath Plus < 10.3.0 - Remote Code Execution
- POC 2025-11-07CVE-2025-32429: XWiki Platform - SQL Injection
- POC 2025-11-07CVE-2025-44136: MapTiler Tileserver-php v2.0 - Unauthenticated XSS
- POC 2025-11-07CVE-2025-44137: MapTiler Tileserver-php v2.0 - Unauthenticated File Read
- POC 2025-11-07CVE-2025-51482: Letta Letta 0.7.12 - Remote Code Execution
- POC 2025-11-07CVE-2025-58443: FOGProject <= 1.5.10.1673 - Authentication Bypass
- POC 2025-11-07CVE-2025-6403: Code-Projects School Fees Payment System 1.0 - SQL Injection
- POC 2025-11-07CVE-2025-9985: Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File
- POC 2025-11-07bentoml-ssrf: Bentoml - Server Side Request Forgery
- POC 2025-11-07xss-uri-reflected: Reflected XSS
- 2025-11-07TDuck /user/form/data/download/file SQL 注入漏洞（CVE-2025-57631）
- 2025-11-07TDuck /user/form/data/query SQL 注入漏洞（CVE-2023-51805）
- 2025-11-07WordPress Events Manager /wp-admin/admin-ajax.php SQL 注入漏洞（CVE-2025-6970）
- 2025-11-07Tautulli /image/images 目录遍历漏洞（CVE-2025-58760）
- 2025-11-07DataEase /de2api/datasource/validate 命令执行漏洞（CVE-2025-62420）
- 2025-11-07AbanteCart /index.php template 目录遍历漏洞（CVE-2025-50971）
- 2025-11-03XWiki Platform /bin/register/XWiki/XWikiRegister 代码执行漏洞（CVE-2024-21650）
- 2025-11-03CCU-Historian /query/jsonrpc.gy 命令执行漏洞
- 2025-11-03Progress Chef Automate /api/v0/compliance/profiles/search SQL 注入漏洞（CVE-2025-8868）
- 2025-11-03AbanteCart /index.php tmpl_id SQL 注入漏洞（CVE-2025-50972）
- 2025-11-03Optilink 管理系统 /cgi/fsystem/gene.php 命令执行漏洞
- 2025-11-03PrestaShop tshirtecommerce /tshirtecommerce/fonts.php 目录遍历漏洞（CVE-2023-27640）
- 2025-11-03HJSoft HCM Human Resources Management System /selfservice/lawresource/downlawbase SQL 注入漏洞（CVE-2025-10197）
- 2025-11-03Trinity Audio /wp-content/plugins/trinity-audio/admin/inc/phpinfo.php 信息泄露漏洞（CVE-2025-9196）
- 2025-11-03Tautulli /real_pms_image_proxy 目录遍历漏洞（CVE-2025-58761）
- 2025-11-03XWiki Platform /bin/ssx/Main/WebHome 目录遍历漏洞（CVE-2025-55748）
- 2025-11-03Gladinet CentreStack & TrioFox /storage/t.dn 目录遍历漏洞（CVE-2025-11371）
- 2025-11-03Adobe Commerce/Magento SessionReaper /customer/address_file/upload 文件上传漏洞（CVE-2025-54236）
- 2025-10-29(CVE-2025-4665) Contact Form CFDB7 SQL注入与不安全反序列化漏洞
- POC 2025-10-28维达外贸客户关系管理系统 AccountSelect 存在SQL注入漏洞
- 2025-10-28Apache Tomcat URL重写绕过漏洞 （CVE-2025-55752）
- 2025-10-27(CVE-2025-29927) Next.js 中间件授权检查绕过漏洞
- 2025-10-27（CVE-2025-5777）Citrix NetScaler管理接口输入验证不足导致内存读取越界漏洞
- 2025-10-17（CVE-2025-53770）Microsoft SharePoint Server反序列化漏洞允许远程代码执行
- 2025-10-17PrestaShop MyPrestaModules send.php 信息泄露漏洞（CVE-2023-39677）
- 2025-10-17PrestaShop /module/xipblog/archive SQL 注入漏洞（CVE-2023-27847）
- 2025-10-15Project-Online-Shopping-Website SQL注入漏洞
- 2025-10-14WordPress plugin WP JobHunt 跨站脚本漏洞
- 2025-10-14Code-Projects Project Monitoring System SQL注入漏洞
- 2025-10-14CodeAstro Gym Management System SQL注入漏洞
- 2025-10-14CodeAstro Gym Management System SQL注入漏洞
- 2025-10-14Apache ActiveMQ Artemis 控制台 弱口令漏洞
- 2025-10-14(CVE-2025-9242) WatchGuard Fireware OS 未授权远程代码执行漏洞
- 2025-10-14(CVE-2025-61884) Oracle配置器运行时UI未授权访问漏洞
- 2025-10-13Traccar 本地文件包含（CVE-2025-61666）
- 2025-10-13Vite 文件读取权限绕过(CVE-2025-46565)
- 2025-10-13（CVE-2025-9196）Trinity Audio插件敏感信息泄露漏洞
- 2025-10-10DataHub /logIn 默认口令漏洞
- 2025-10-10ZYCOO CooVox Series IP Phone System /login 默认口令漏洞
- 2025-10-10Pterodactyl Panel /locales/locale.json 信息泄露漏洞（CVE-2025-49132）
- 2025-10-10Oracle E-Business Suite 未授权访问漏洞（CVE-2025-61882）
- 2025-10-10（CVE-2025-36604）Dell Unity OS命令注入漏洞
- 2025-10-10PRTG 网络监视器 弱口令漏洞
- 2025-10-10TRUfusion Enterprise 认证绕过漏洞(CVE-2025-27223)
- 2025-10-09TRUfusion Enterprise 目录遍历漏洞(CVE-2025-27222)
- 2025-10-09TRUfusion Enterprise 未授权访问漏洞(CVE-2025-27225)
- 2025-10-09（CVE-2025-4322）WordPress Motors主题权限提升漏洞
- 2025-10-08Oracle E-Business Suite 远程代码执行漏洞
- 2025-10-07（CVE-2025-61882）Oracle Concurrent Processing BI Publisher Integration 远程接管漏洞
- 2025-10-02CodeAstro Online Leave Application SQL注入漏洞
- 2025-10-02CodeAstro Online Leave Application SQL注入漏洞
- 2025-10-02PHPGurukul Employee Record Management System 代码注入漏洞
- 2025-10-02Code-Projects Simple Scheduling System SQL注入漏洞
- 2025-10-02Code-Projects Simple Scheduling System SQL注入漏洞
- 2025-10-02CodeAstro Student Grading System SQL注入漏洞
- 2025-10-02itsourcecode Hostel Management System 代码注入漏洞
- 2025-10-02Code-Projects Simple Scheduling System SQL注入漏洞
- 2025-10-01itsourcecode Open Source Job Portal SQL注入漏洞
- 2025-10-01CourseSelectionSystem SQL注入漏洞
- 2025-10-01Code-Projects E-Commerce Website SQL注入漏洞
- 2025-09-28Sim Studio AI 服务端请求伪造漏洞(CVE-2025-9805)
- 2025-09-26PHPJABBERS Restaurant Menu Maker Project 代码注入漏洞
- 2025-09-26SourceCodester Pet Grooming Management Software SQL注入漏洞
- 2025-09-26SourceCodester Pet Grooming Management Software SQL注入漏洞
- 2025-09-26（CVE-2025-20362）思科ASA和FTD VPN Web服务器输入验证漏洞导致未授权访问受限URL
- 2025-09-26TurboMail mailmain 信息泄露漏洞
- 2025-09-26WordPress Featured Image from URL plugin信息泄露漏洞（CVE-2025-9985）
- 2025-09-25用友 U8 Cloud NCCloudGatewayServlet存在命令执行漏洞
- 2025-09-24Spring Cloud Gateway 信息泄露漏洞（CVE-2025-41243）
- 2025-09-24Spring Cloud Gateway环境属性修改漏洞 (CVE-2025-41243)
- 2025-09-22IBM Watsonx.data 跨站脚本漏洞
- 2025-09-22SourceCodester Pet Grooming Management Software SQL注入漏洞
- 2025-09-22Snipe-IT 跨站脚本漏洞
- 2025-09-19Wordpress Plugin Ultimate Auction Pro /wp-admin/admin-ajax.php uwa_see_more_bids_ajax SQL 注入漏洞 （CVE-2025-4204）
- 2025-09-19Wordpress WooCommerce Ultimate Gift Card /wp-admin/admin-ajax.php mwb_wgm_preview_mail 文件上传漏洞（CVE-2024-8425）
- 2025-09-19PrestaShop /module/tshirtecommerce/designer SQL 注入漏洞（CVE-2023-27637）
- 2025-09-19PrestaShop SQL 注入漏洞（CVE-2023-46358）
- 2025-09-19PrestaShop /module/askforaquote/QuotesCart SQL 注入漏洞（CVE-2023-27843）
- 2025-09-18QNAP Qsync Central 路径遍历漏洞
- 2025-09-18QNAP Qsync Central 路径遍历漏洞
- 2025-09-18QNAP Qsync Central SQL注入漏洞
- 2025-09-18QNAP VioStor 授权问题漏洞
- 2025-09-18QNAP VioStor 路径遍历漏洞
- 2025-09-18QNAP Qsync Central 信任管理问题漏洞
- 2025-09-18QNAP Systems Photo Station 跨站脚本漏洞
- 2025-09-18（CVE-2025-10035）Fortra GoAnywhere MFT License Servlet反序列化漏洞可能导致命令注入
- 2025-09-16HP 1820-8G Switch J9979A 弱口令漏洞
- 2025-09-15itC 中心管理服务器 uploadFileApp.do 任意文件上传漏洞
- 2025-09-12Fujitsu IP Series 权限绕过漏洞（CVE-2023-38433）
- 2025-09-12MagicINFO SWUpdateFileUploader 文件上传漏洞
- 2025-09-12DataCube3 exec.php SQL 注入漏洞（CVE-2024-25833）
- 2025-09-12Appsmith postgres 代码执行漏洞（CVE-2024-55963）
- 2025-09-12BLINK routers set_AdvDns_cfg 命令执行漏洞
- 2025-09-12XWiki Platform /rest/wikis/xwiki/pages 权限绕过漏洞（CVE-2025-29925）
- 2025-09-12Next.js Middleware 服务器端请求伪造漏洞（CVE-2025-57822）
- 2025-09-12Commvault /commandcenter/publicLink.do 权限绕过漏洞（CVE-2025-57788）
- 2025-09-11WordPress Ditty 存在 SSRF 漏洞（CVE-2025-8085）
- 2025-09-11西部数码 NAS sendLogToSupport.php 远程代码执行漏洞
- 2025-09-10华天软件InforCenter PLM uploadFileHttp 任意文件上传漏洞
- 2025-09-09(CVE-2025-58751) Vite server.fs 安全绕过漏洞
- 2025-09-09Next.js Middleware SSRF漏洞(CVE-2025-57822)
- POC 2025-09-05用友NC IMsgCenterWebService 命令执行漏洞
- 2025-09-05JetBrains TeamCity 认证绕过漏洞（CVE-2024-23917）
- 2025-09-05（CVE-2025-58179）Astro Cloudflare适配器SSRF漏洞允许绕过第三方域限制
- 2025-09-04Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)
- 2025-09-03Jeecgboot /jmreport/save远程代码执行漏洞
- POC 2025-09-03Smartbi /imageimport.jsp 存在任意文件上传
- 2025-09-02WordPress plugin Events Addon for Elementor 跨站脚本漏洞
- 2025-09-02WordPress plugin Related Posts Lite 跨站请求伪造漏洞
- 2025-09-02WordPress plugin TablePress 跨站脚本漏洞
- 2025-09-02WordPress plugin Ocean Extra 跨站脚本漏洞
- 2025-09-01宏景人力资源信息管理系统 KhFieldTree 存在SQL注入漏洞
- 2025-09-01畅捷通T+ ME_MemberIntegral_IntegralAdjust 存在反序列化漏洞
- 2025-09-01畅捷通T+ getdecallusers信息泄露漏洞
- 2025-09-01禅道 zahost-create.html 存在命令执行漏洞
- 2025-09-01百卓Smart uploadfile存在任意文件上传漏洞
- 2025-09-01Panabit iXCache /cgi-bin/Maintain/date_config 远程命令执行漏洞
- 2025-09-01Oracle E-Business Suite /OA_HTML/jtfwrepo.xml 敏感信息泄漏漏洞
- 2025-09-01CVE-2019-11510: Pulse Connect Secure SSL VPN Arbitrary File Read
- 2025-09-01CVE-2019-16278: Nostromo 1.9.6 - Remote Code Execution
- 2025-09-01CVE-2019-16759: vBulletin v5.0.0-v5.5.4 Remote Command Execution
- 2025-09-01CVE-2019-16996: Metinfo 7.0.0beta SQL Inject
- 2025-09-01CVE-2019-16997: Metinfo sql inject
- 2025-09-01CVE-2019-17418: Metinfo sql inject
- 2025-09-01CVE-2019-19781: Citrix Application Delivery Controller (ADC) and Gateway Directory Traversal.
- 2025-09-01CVE-2019-19985: WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download
- 2025-09-01CVE-2019-20085: TVT NVMS 1000 - Directory Traversal
- 2025-09-01CVE-2019-7192: QNAP PhotoStation Unauthorizated File Read
- 2025-09-01CVE-2019-9670: Zimbra Collaboration XXE
- 2025-09-01ibm-storage-default-password: IBM Storage Management Default Login
- 2025-09-01telecom-gateway-default-password: Telecom Gateway Default Password
- 2025-09-01tomcat-default-login: Apahce Tomcat Manager Default Login
- 2025-09-01trilithic-viewpoint-default-password: Trilithic Viewpoint Default Login
- 2025-09-01nsfocus-uts-password-leak: Nsfocus uts password leak
- 2025-09-01alertmanager-unauth: Alertmanager 未授权访问
- 2025-09-01bt742-pma-unauthorized-access: BT742 PMA Unauthorized Access
- 2025-09-01druid-monitor-unauth: Druid Monitor Unauth
- 2025-09-01etcd-unauth: ETCD Unauth
- 2025-09-01qizhi-fortressaircraft-unauthorized: qizhi fortressaircraft unauthorized
- 2025-09-01springboot-actuator-unauth: Springboot Actuator Unauth
- 2025-09-01amtt-hiboss-server-ping-rce: Amtt hiboss Server Ping RCE
- 2025-09-01cellinxnvt-getfilecontent-cgi-fileread: Cellinx NVT - GetFileContent.cgi - FileRead
- 2025-09-01chanjet-tplus-checkpassword-sqli: 用友 畅捷通T+ CheckPassword SQL注入漏洞