ACTI Vulnerabilities
102 vulnerabilities related to ACTI
- PoC2026-08-18mixed-active-content: Mixed Active Content
- 2026-06-03Apache ActiveMQ默认口令存在代码注入漏洞(CVE-2026-42588)
- 2026-06-02Apache ActiveMQ /api/jolokia/ 代码执行漏洞（CVE-2026-42588）
- 2026-05-29Apache ActiveMQ Artemis /console/auth/login 默认口令漏洞
- 2026-05-11Apache ActiveMQ默认口令存在代码注入漏洞(CVE-2026-34197)
- PoC2026-05-09CVE-2024-32114: Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control
- PoC2026-05-09CVE-2026-40466: Apache ActiveMQ - Remote Code Execution via HTTP Discovery Transport Bypass
- 2026-05-06Apache ActiveMQ存在代码注入漏洞(CVE-2026-40466)
- 2026-04-24Apache ActiveMQ /api/jolokia/ 代码执行漏洞（CVE-2026-40466）
- PoC2026-04-09CVE-2022-41678: Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution
- PoC2026-04-09CVE-2026-34197: Apache ActiveMQ - Remote Code Execution
- 2026-04-08Apache ActiveMQ /api/jolokia/ 代码执行漏洞（CVE-2026-34197）
- PoC2026-03-25CVE-2023-6030: LogDash Activity Log <= 1.1.3 - SQL Injection
- PoC2026-01-27cacti-guest-access-enabled: Cacti - Guest User Access Enabled
- PoC2026-01-16cacti-log-exposure: Cacti Log - Exposure
- PoC2026-01-16cacti-fpd: Cacti - Full Path Disclosure
- PoC2026-01-08CVE-2015-8350: WordPress Calls to Action <=2.4.3 - Authenticated Reflected XSS
- 2025-10-17Apache ActiveMQ NMS AMQP Client 反序列化漏洞
- 2025-10-17Apache ActiveMQ NMS AMQP Client 反序列化漏洞
- 2025-10-14Apache ActiveMQ Artemis 控制台 弱口令漏洞
- 2025-08-25Apache ActiveMQ Artemis Console存在默认账号密码
- PoC2025-08-01CVE-2014-4513: ActiveHelper LiveHelp Server 3.1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2016-3088: Apache ActiveMQ Fileserver - Arbitrary File Write
- PoC2025-08-01CVE-2017-5689: Intel Active Management - Authentication Bypass
- PoC2025-08-01CVE-2018-8006: Apache ActiveMQ <=5.15.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-8813: Cacti v1.2.8 - Remote Code Execution
- PoC2025-08-01CVE-2021-26247: Cacti - Cross-Site Scripting
- PoC2025-08-01CVE-2022-1916: WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-46169: Cacti <=1.2.22 - Remote Command Injection
- PoC2025-08-01CVE-2023-30534: Cacti < 1.2.25 Insecure Deserialization
- PoC2025-08-01CVE-2023-39361: Cacti 1.2.24 - SQL Injection
- PoC2025-08-01CVE-2023-5003: Active Directory Integration WP Plugin < 4.1.10 - Log Disclosure
- PoC2025-08-01CVE-2024-29895: Cacti cmd_realtime.php - Command Injection
- PoC2025-08-01CVE-2023-46604: Apache ActiveMQ - Remote Code Execution
- PoC2025-08-01CVE-2016-3088: ActiveMQ Arbitrary File Write Vulnerability (CVE-2016-3088)
- PoC2025-08-01public-actiontrail-bucket: ActionTrail Log Buckets - Publicly Exposed
- PoC2025-08-01cw-alarms-actions: CloudWatch Alarms Actions Enabled
- PoC2025-08-01CVE-2022-46169: Cacti remote_agent.php 远程命令执行漏洞
- PoC2025-08-01CVE-2023-46604: Apache ActiveMQ RCE
- PoC2025-08-01activemq-default-password: ActiveMQ Default Password
- PoC2025-08-01azure-log-profile-all-activities: Azure Log Profile Missing Critical Activity Categories
- PoC2025-08-01acti-video-read-file: ACTI 视频监控 images 任意文件读取漏洞
- PoC2025-08-01gcloud-api-keys-inactive-services: API Keys Should Only Exist for Active Services
- PoC2025-08-01cacti-weathermap-file-write: Cacti Weathermap File Write
- PoC2025-08-01gcloud-func-inactive-svc-acc: Inactive Service Accounts in Google Cloud Functions
- PoC2025-08-01entsoft-crm-customeraction-entphone-fileupload: 浙大恩特CRM/entsoft/CustomerAction.entphone;.js?method=loadFile任意文件上传
- PoC2025-08-01entsoft-crm-mailaction-entphone-fileupload: 浙大恩特CRM/entsoft/MailAction.entphone;.js?method=loadFile任意文件上传
- PoC2025-08-01inactive-password-lock-default: Ensure Inactive Password Lock is Configured (Default Setting)
- PoC2025-08-01download-unsigned-activex-allowed: Download of Unsigned ActiveX Controls Allowed
- PoC2025-08-01panabit-singleuser-action-sqli: panabit日志审计 singleuser_action.php SQL注入漏洞
- PoC2025-08-01yuantian-oa-getdata-action-sql-injection: 源天OA GetDataAction SQL注入漏洞
- PoC2025-08-01activemq-artemis-default-login: Apache ActiveMQ Artemis Console Default Login
- PoC2025-08-01activemq-default-login: Apache ActiveMQ Default Login
- PoC2025-08-01activecollab-installer: ActiveCollab Installation Page - Exposure
- PoC2025-08-01acti-video-lfi: ACTi-Video Monitoring - Local File Inclusion
- PoC2025-08-01cacti-weathermap-file-write: Cacti Weathermap File Write
- PoC2025-08-01weaver-ktreeuploadaction-file-upload: Weaver E-Cology KtreeUploadAction - Arbitrary File Upload
- PoC2025-08-01activemq-path-disclosure: ActiveMQ Path Disclosure
- PoC2025-08-01activemq-version: ActiveMQ Version Detect
- 2025-07-04Apache ActiveMQ /api/jolokia/list 未授权访问漏洞（CVE-2024-32114）
- 2025-07-04Apache ActiveMQ /api/jolokia/list 未授权访问漏洞（CVE-2024-32114）
- 2025-01-16Microsoft Active Directory Federation Services 跨站请求伪造漏洞
- 2024-10-16网动统一通信平台（ActiveUC）存在敏感信息泄露漏洞
- 2024-09-25泛微e-cology BrowserAction 前台SQL注入漏洞
- 2024-09-02用友 U8Cloud AddTaskDataRightAction SQL注入漏洞
- PoC2024-08-02中心管理服务器 actionNetworkCmd 存在后台命令执行
- 2024-08-01Allegra SiteConfigAction 认证绕过漏洞
- 2024-06-28Cacti cmd_realtime CVE-2024-29895 命令注入漏洞
- 2024-06-06Cacti CVE-2024-25641 任意文件写入漏洞
- 2024-05-30Cacti 弱口令漏洞
- 2024-04-26Cacti spikekill.php 跨站脚本攻击漏洞
- PoC2024-04-23网动统一通信平台ActiveUC存在任意文件下载漏洞
- 2024-04-03Cacti managers.php CVE-2023-51448 SQL注入漏洞
- 2024-03-29Actidata actiNAS CVE-2023-51947 信息泄露漏洞
- 2024-03-29Actidata actiNAS CVE-2023-51946 跨站脚本漏洞
- 2024-03-14Cacti Group Cacti sql_save SQL注入漏洞
- 2024-02-22Active Directory Federation Services权限提升漏洞
- 2024-02-22Cacti remote_agent.php 命令执行漏洞
- 2024-02-07Cacti CVE-2023-39362 命令注入漏洞
- 2024-02-07Cacti CVE-2023-39361 SQL注入漏洞
- 2024-02-07Cacti pollers.php SQL注入漏洞
- 2024-01-19Cacti SQL注入漏洞(CVE-2023-39361)
- 2023-11-15浙大恩特客户资源管理系统 CustomerAction.entphone 文件上传漏洞
- 2023-11-15浙大恩特客户资源管理系统 CustomerAction.entphone 文件上传漏洞
- 2023-08-30Cacti Reports Creation 匿名账户远程命令执行漏洞
- 2023-05-26ActiveMQ 消息代理系统 fileserver 文件上传漏洞（CVE-2016-3088）
- 2023-05-26Weblogic JtaTransactionManager 反序列化远程代码执行漏洞（CVE-2020-2551）
- 2023-05-26ActiveMQ 消息代理系统 fileserver 文件上传漏洞（CVE-2016-3088）
- 2023-05-26Weblogic JtaTransactionManager 反序列化远程代码执行漏洞（CVE-2020-2551）
- 2023-04-13速达软件 V.NET home.action 存在 Struts2 代码执行漏洞
- 2023-01-05Cacti 存在命令注入漏洞 (CVE-2022-46169)
- 2023-01-05Cacti weathermap插件任意文件上传漏洞
- 2022-08-23浙大恩特CrmBasicAction.entcrm 任意文件上传
- 2022-03-08CactiEZ信息泄露
- 2021-08-11ACTI 视频监控 任意文件读取漏洞
- 2021-01-19cacti气象图插件-任意文件上传
- 2021-01-19Actiontec路由器-默认口令
- 2021-01-19Actiontec路由器-文件下载
- 2021-01-19ACTi摄像头-弱口令
- 2014-01-21（CVE-2013-6040）MW6 Aztec、DataMatrix和MaxiCode ActiveX控件远程代码执行漏洞
- 2014-01-21MW6 Technologies ActiveX控件存在多个漏洞
- 2011-01-29Lomtec ActiveWeb Professional EasyEdit模块任意文件上传漏洞