Ash Vulnerabilities
214 vulnerabilities related to Ash
- PoC2026-08-18CVE-2026-4060: Geo Mashup <= 1.13.18 - SQL Injection
- PoC2026-08-18nodogsplash-lfi: Nodogsplash - Directory Traversal
- PoC2026-08-16CVE-2026-15733: WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read
- PoC2026-08-16CVE-2026-53519: Nezha Dashboard < 2.0.13 - Path Traversal
- 2026-07-20Kubernetes Dashboard /api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs 权限绕过漏洞（CVE-2018-18264）
- PoC2026-06-24CVE-2026-55592: Dashy <= 4.3.6 - Reflected XSS via Workspace
- 2026-06-18Nezha Dashboard /dashboard../data/config.yaml 目录遍历漏洞（CVE-2026-53519）
- PoC2026-06-17CVE-2022-44727: PrestaShop lgcookieslaw - SQL Injection
- 2026-06-12PrestaShop ProductsAlert /module/productsalert/AjaxProcess SQL 注入漏洞（CVE-2024-36683）
- 2026-06-08杭州吉拉科技有限公司LVS精益价值管理系统LVS.Web.ashx 接口存在信息泄露漏洞
- 2026-05-29Kubeflow Dashboard /api/workgroup/env-info 未授权访问漏洞
- PoC2026-05-14CVE-2026-38360: dash-uploader 0.1.0 - 0.7.0a2 - Unauthenticated Arbitrary File Write via Path Traversal
- PoC2026-05-14CVE-2026-38361: dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks
- PoC2026-05-09apache-skywalking-dashboard: Apache SkyWalking - Dashboard
- PoC2026-05-09filestash-installer: Filestash - Installer Exposure
- PoC2026-04-16CVE-2026-2416: Geo Mashup <= 1.13.17 - SQL Injection
- PoC2026-04-09CVE-2021-23337: Lodash Template - Server-Side Template Injection (RCE)
- PoC2026-04-09CVE-2025-54597: Heimdall Application Dashboard < 2.7.3 - Reflected XSS
- PoC2026-04-09heimdall-dashboard-exposure: Heimdall Application Dashboard - Unauthenticated Access
- PoC2026-03-25CVE-2023-6030: LogDash Activity Log <= 1.1.3 - SQL Injection
- 2026-03-09Tosei Self-service Washing Machine /cgi-bin/monitor.php 命令执行漏洞（CVE-2026-2944）
- 2026-03-09Tosei Self-service Washing Machine /cgi-bin/downloader.php 目录遍历漏洞（CVE-2024-43022）
- 2026-03-09Tosei Self-service Washing Machine /cgi-bin/view_data.php 文件读取漏洞
- PoC2026-01-24CVE-2020-15081: PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory
- PoC2026-01-24adminbro-dashboard-exposure: AdminBro Dashboard - Unauthenticated Access
- PoC2026-01-24administrate-dashboard: Administrate Dashboard Exposure
- PoC2026-01-24opennms-dashboard-exposure: OpenNMS Dashboard - Exposure Detection
- PoC2026-01-16CVE-2016-15041: MainWP Dashboard <= 3.1.2 - Stored Cross-Site Scripting
- PoC2026-01-16exist-db-dashboard-access: eXist-DB Dashboard Access
- PoC2026-01-16icinga-dashboard-exposure: Icinga Exposed Dashboard
- PoC2026-01-16lightstreamer-dashboard-exposure: Lightstreamer Dashboard Exposure
- PoC2026-01-08bash-config-exposure: Bash Configuration - Exposure
- PoC2025-12-12unauth-munin: Munin Monitoring Dashboard - Exposure
- PoC2025-12-02CVE-2022-31101: Prestashop Blockwishlist 2.1.0 SQL Injection
- PoC2025-12-02CVE-2025-51586: PrestaShop - Information Disclosure
- PoC2025-12-02unauth-akhq-dashboard: AKHQ Dashboard - Unauthenticated Access
- PoC2025-12-02unauth-hawkeye-dashboard: Unauth Hawkeye Dashboard - Detect
- PoC2025-12-02unauth-phoenix-dashboard: Unauth Phoenix Dashboard - Detect
- PoC2025-12-02unauth-supervisor-dashboard: Unauth Supervisor Dashboard - Detect
- 2025-11-03PrestaShop tshirtecommerce /tshirtecommerce/fonts.php 目录遍历漏洞（CVE-2023-27640）
- 2025-11-03PrestaShop tshirtecommerce /tshirtecommerce/fonts.php 目录遍历漏洞（CVE-2023-27640）
- 2025-10-17PrestaShop MyPrestaModules send.php 信息泄露漏洞（CVE-2023-39677）
- 2025-10-17PrestaShop /module/xipblog/archive SQL 注入漏洞（CVE-2023-27847）
- 2025-10-17PrestaShop MyPrestaModules send.php 信息泄露漏洞（CVE-2023-39677）
- 2025-10-17PrestaShop /module/xipblog/archive SQL 注入漏洞（CVE-2023-27847）
- 2025-09-19PrestaShop /module/tshirtecommerce/designer SQL 注入漏洞（CVE-2023-27637）
- 2025-09-19PrestaShop SQL 注入漏洞（CVE-2023-46358）
- 2025-09-19PrestaShop /module/askforaquote/QuotesCart SQL 注入漏洞（CVE-2023-27843）
- 2025-09-19PrestaShop /module/tshirtecommerce/designer SQL 注入漏洞（CVE-2023-27637）
- 2025-09-19PrestaShop SQL 注入漏洞（CVE-2023-46358）
- 2025-09-19PrestaShop /module/askforaquote/QuotesCart SQL 注入漏洞（CVE-2023-27843）
- 2025-09-09MCPHub Dashboard JWT硬编码身份认证绕过漏洞
- 2025-09-06（CVE-2025-0011）AMD Crash Defender敏感信息泄露漏洞
- 2025-09-06（CVE-2025-0009）AMD Crash Defender空指针解引用漏洞
- 2025-08-25OpenSearch Dashboard为存在默认口令
- 2025-08-25OpenSearch Dashboard存在未授权访问
- PoC2025-08-01CVE-2018-10942: Prestashop AttributeWizardPro Module - Arbitrary File Upload
- PoC2025-08-01CVE-2018-18264: Kubernetes Dashboard <1.10.1 - Authentication Bypass
- PoC2025-08-01CVE-2018-8823: PrestaShop Responsive Mega Menu Module - Remote Code Execution
- PoC2025-08-01CVE-2020-25864: HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-26248: PrestaShop Product Comments <4.2.0 - SQL Injection
- PoC2025-08-01CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution
- PoC2025-08-01CVE-2021-25065: Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting
- PoC2025-08-01CVE-2021-3110: PrestaShop 1.7.7.0 - SQL Injection
- PoC2025-08-01CVE-2021-3223: Node RED Dashboard <2.26.2 - Local File Inclusion
- PoC2025-08-01CVE-2021-36748: PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection
- PoC2025-08-01CVE-2021-37538: PrestaShop SmartBlog <4.0.6 - SQL Injection
- PoC2025-08-01CVE-2021-41192: Redash Setup Configuration - Default Secrets Disclosure
- PoC2025-08-01CVE-2022-22897: PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection
- PoC2025-08-01CVE-2022-29153: HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery
- PoC2025-08-01CVE-2022-38817: Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control
- PoC2025-08-01CVE-2023-27032: PrestaShop AdvancedPopupCreator - SQL Injection
- PoC2025-08-01CVE-2023-27637: PrestaShop `tshirtecommerce` Module - SQL Injection
- PoC2025-08-01CVE-2023-27638: tshirtecommerce PrestaShop Module - SQL Injection
- PoC2025-08-01CVE-2023-27639: PrestaShop TshirteCommerce - Directory Traversal
- PoC2025-08-01CVE-2023-27640: PrestaShop tshirtecommerce - Directory Traversal
- PoC2025-08-01CVE-2023-27847: PrestaShop xipblog - SQL Injection
- PoC2025-08-01CVE-2023-30150: PrestaShop leocustomajax 1.0 & 1.0.0 - SQL Injection
- PoC2025-08-01CVE-2023-30192: PrestaShop 'possearchproducts' <= 1.7 - SQL Injection
- PoC2025-08-01CVE-2023-34020: Uncanny Toolkit for LearnDash - Open Redirection
- PoC2025-08-01CVE-2023-35844: Lightdash version <= 0.510.3 Arbitrary File Read
- PoC2025-08-01CVE-2023-39120: Nodogsplash - Directory Traversal
- PoC2025-08-01CVE-2023-39650: PrestaShop Theme Volty CMS Blog - SQL Injection
- PoC2025-08-01CVE-2023-39676: PrestaShop fieldpopupnewsletter Module - Cross Site Scripting
- PoC2025-08-01CVE-2023-39677: PrestaShop MyPrestaModules - PhpInfo Disclosure
- PoC2025-08-01CVE-2023-45375: PrestaShop PireosPay - SQL Injection
- PoC2025-08-01CVE-2023-46347: PrestaShop Step by Step products Pack - SQL Injection
- PoC2025-08-01CVE-2023-7246: System Dashboard < 2.8.10 - Cross-Site Scripting
- PoC2025-08-01CVE-2024-1208: LearnDash LMS < 4.10.3 - Sensitive Information Exposure
- PoC2025-08-01CVE-2024-1209: LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments
- PoC2025-08-01CVE-2024-1210: LearnDash LMS < 4.10.2 - Sensitive Information Exposure
- PoC2025-08-01CVE-2024-21485: Dash Framework - Cross-site Scripting
- PoC2025-08-01CVE-2024-32231: Stash < 0.26.0 - SQL Injection
- PoC2025-08-01CVE-2024-36683: PrestaShop productsalert - SQL Injection
- PoC2025-08-01CVE-2024-5084: Hash Form <= 1.1.0 - Arbitrary File Upload
- PoC2025-08-01CVE-2024-6586: Lightdash v0.1024.6 - Server-Side Request Forgery
- PoC2025-08-01CVE-2025-47423: Personal Weather Station Dashboard 12 - Directory Traversal
- PoC2025-08-01CVE-2020-25864: HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-3223: Node RED Dashboard - Directory Traversal
- PoC2025-08-01kubernetes-dashboard-enabled: Kubernetes Dashboard for ACK Clusters - Enabled
- PoC2025-08-01CVE-2022-38817: Dapr Dashboard configurations 未授权访问漏洞
- PoC2025-08-01CVE-2023-35844: Lightdash Arbitrary File Read
- PoC2025-08-01gcloud-dnssec-keysigning-rsasha1: DNSSEC RSASHA1 Algorithm Deprecated Usage
- PoC2025-08-01gcloud-dnssec-rsasha1-deprecated: DNSSEC RSASHA1 Algorithm Deprecated
- PoC2025-08-01strong-password-hashing: Ensure Strong Password Hashing Algorithm is Configured
- PoC2025-08-01jenkins-dashboard-unauth: Jenkins Dashboard 未授权访问
- PoC2025-08-01privesc-ash: Ash - Privilege Escalation
- PoC2025-08-01privesc-bash: Bash - Privilege Escalation
- PoC2025-08-01privesc-dash: Dash - Privilege Escalation
- PoC2025-08-01privesc-sash: sash - Privilege Escalation
- PoC2025-08-01privesc-yash: Yash - Privilege Escalation
- PoC2025-08-01crash-on-audit-fail: Shutdown on Audit Failure Check
- PoC2025-08-01lm-hash-storage-enabled: LM Hash Storage Enabled
- PoC2025-08-01CVE-2022-31181: PrestaShop - SQL Injection to Eval Injection
- PoC2025-08-01CVE-2023-30194: Prestashop posstaticfooter <= 1.0.0 - SQL Injection
- PoC2025-08-01CVE-2024-10708: System Dashboard < 2.8.15 - Admin+ Path Traversal
- PoC2025-08-01opensearch-dashboard-default-login: OpenSearch Dashboard - Default Login
- PoC2025-08-01beego-admin-dashboard: Beego Admin Dashboard Panel- Detect
- PoC2025-08-01goodjob-dashboard: goodjob-dashboard
- PoC2025-08-01sidekiq-dashboard: Sidekiq Dashboard Panel - Detect
- PoC2025-08-01filestash-admin-config: Filestash Admin Password Configuration
- PoC2025-08-01ace-admin-dashboard: Ace Admin Dashboard - Detect
- PoC2025-08-01aem-hash-querybuilder: Query hashed password via QueryBuilder Servlet
- PoC2025-08-01anteon-dashboard-unauth: Anteon Dashboard - Unauthenticated
- PoC2025-08-01atlantis-dashboard: Atlantis Dashboard - Exposure
- PoC2025-08-01clockwork-dashboard-exposure: Clockwork Dashboard Exposure
- PoC2025-08-01codis-dashboard: Codis Dashboard Exposure
- PoC2025-08-01confluence-dashboard: Confluence Dashboard Exposed
- PoC2025-08-01doris-dashboard: Doris Dashboard - Exposed
- PoC2025-08-01elastic-hd-dashboard: Elastic HD Dashboard Exposure
- PoC2025-08-01esphome-dashboard: ESPHome Dashboard Exposure
- PoC2025-08-01filebrowser-unauth: File Browser Dashboard - Unauthenticated Access
- PoC2025-08-01ganglia-cluster-dashboard: Ganglia Cluster Dashboard - Detect
- PoC2025-08-01h2o-dashboard: H2O Dashboard - Exposure
- PoC2025-08-01hashicorp-consul-unauth: Hashicorp Consul API Unauthenticated
- PoC2025-08-01helm-dashboard-exposure: Helm Dashboard - Exposure
- PoC2025-08-01prestashop-installer: Prestashop Installer Exposure
- PoC2025-08-01redash-installer: Redash Installer Exposure
- PoC2025-08-01ruckus-unleashed-install: Ruckus Unleashed Exposed Installation
- PoC2025-08-01lidarr-dashboard-unauth: Lidarr Dashboard - Unauthenticated
- PoC2025-08-01mobiproxy-dashboard: MobiProxy Dashboard - Detect
- PoC2025-08-01netalertx-dashboard: NetAlert X Admin Dashboard - Exposed
- PoC2025-08-01nextcloudpi-dashboard: NextcloudPi Dashboard - Exposed
- PoC2025-08-01ntopng-traffic-dashboard: Ntopng Traffic Dashboard - Detect
- PoC2025-08-01opensearch-dashboard-unauth: OpenSearch Dashboard - Unauth Access
- PoC2025-08-01radarr-dashboard-unauth: Radarr Dashboard - Unauthenticated
- PoC2025-08-01ray-dashboard: Ray Dashboard Exposure
- PoC2025-08-01repetier-unauth: Repetier Server Dashboard - Unauthenticated
- PoC2025-08-01seq-dashboard-unauth: Seq Dashboard - Unauthenticated
- PoC2025-08-01simatic-dashboard-exposed: Siemens SIMATIC 300 Dashboard - Exposed
- PoC2025-08-01slurm-hpc-dashboard: Slurm HPC Dashboard - Detect
- PoC2025-08-01syncthing-dashboard: Syncthing Dashboard Exposure
- PoC2025-08-01transmission-dashboard: Transmission Dashboard - Detect
- PoC2025-08-01unauth-fastvue-dashboard: Fastvue Dashboard Panel - Unauthenticated Detect
- PoC2025-08-01unauthenticated-nginx-dashboard: Nginx Dashboard
- 2025-08-01vault-unsealed-unauth: HashiCorp Vault API - Exposure
- PoC2025-08-01whisparr-dashboard-unauth: Whisparr Dashboard - Unauthenticated
- PoC2025-08-01zabbix-dashboards-access: zabbix-dashboards-access
- PoC2025-08-01mashery-takeover: mashery takeover detection
- PoC2025-08-01hashicorp-consul-rce: Hashicorp Consul Services API - Remote Code Execution
- PoC2025-08-01logstash-log4j-rce: Logstash - Remote Code Execution (Apache Log4j)
- PoC2025-08-01prestashop-apmarketplace-sqli: PrestaShop Ap Marketplace - SQL Injection
- PoC2025-08-01prestashop-blocktestimonial-file-upload: Prestashop Blocktestimonial Modules - File Upload Vulnerability
- PoC2025-08-01prestashop-cartabandonmentpro-file-upload: Prestashop Cart Abandonment Pro File Upload
- PoC2025-08-01splash-render-ssrf: Splash Render - SSRF
- PoC2025-08-01wp-qwiz-online-xss: Qwiz Online Quizzes And Flashcards <= 3.36 - Cross-Site Scripting
- PoC2025-08-01acrolinx-dashboard: Acrolinx Dashboard
- PoC2025-08-01openstack-dashboard-login: OpenStack Dashboard Login Panel - Detect
- 2025-07-07PWS Dashboard 存在任意文件读取漏洞（CVE-2025-47423）
- 2025-06-17(CVE-2025-4754) ash_authentication_phoenix组件会话过期不足漏洞
- 2025-06-10（CVE-2025-4577）Smash Balloon Social Post Feed插件存储型跨站脚本漏洞
- 2025-05-23Clash /configs 未授权访问漏洞
- 2025-05-21Clash 代码执行漏洞
- 2025-05-21Clash /configs 未授权访问漏洞
- 2025-05-21Clash /configs 未授权访问漏洞
- 2025-04-27(CVE-2025-3969) codeprojects News Publishing Site Dashboard Edit Category Page组件category_image参数不受限文件上传漏洞
- 2025-03-14Stash /graphql SQL 注入漏洞（CVE-2024-32231）
- 2025-03-14Stash /graphql SQL 注入漏洞（CVE-2024-32231）
- 2025-03-03Stash 存在 SQL注入漏洞（CVE-2024-32231）
- 2024-11-08Cisco Nexus Dashboard Fabric Controller SQL注入漏洞
- 2024-10-14HashiCorp Vault Community Edition等 权限管理不当漏洞
- 2024-10-02Cisco Nexus Dashboard Fabric 控制器和 Nexus Dashboard Orchestrator 信息泄露漏洞 (CVE-2024-20490)
- 2024-08-15(CVE-2024-7625) HashiCorp Nomad 路径遍历漏洞
- 2024-08-09Kashipara Responsive School Management System 跨站脚本漏洞
- 2024-08-06易捷OA协同办公软件 ShowPic 任意文件读取漏洞
- 2024-08-05易捷OA ShowPic 任意文件读取漏洞
- 2024-07-25金格 WebRevisionAjax.ashx 任意文件上传漏洞
- 2024-05-31Kubernetes Dashboard 认证绕过信息泄露漏洞
- 2024-03-27Flash CGI Mini Thread 跨站脚本漏洞
- 2024-03-26Redash存在重复安装重置密码漏洞(CVE-2021-41192)
- 2024-03-25(CVE-2023-33923) HashThemes Viral News、HashThemes Viral、HashThemes HashOne 授权漏洞
- 2024-03-14GNU Bash环境变量命令执行漏洞 - HTTP
- 2024-02-07Schneider Electric IGSS DashBoard.exe CVE-2023-3001 不安全反序列化漏洞
- 2024-02-07Lightdash CVE-2023-35844 任意文件读取漏洞
- 2024-02-07Flash flood disaster monitoring CVE-2023-4172 任意文件读取漏洞
- 2024-02-02HashiCorp Vault 日志信息泄露漏洞
- 2023-08-01HashiCorp Consul/Consul Enterprise 存在ssrf漏洞(CVE-2022-29153)
- 2023-06-20Lightdash存在路径遍历漏洞(CVE-2023-35844)
- 2022-10-26DaprDashboard未授权访问漏洞(CVE-2022-38817)
- 2022-09-16重庆猫扑网络科技有限公司 OperaFiles.ashx 任意文件读取漏洞
- 2022-08-01prestashop 1.6.0.10/1.7.8.6 远程代码执行漏洞(CVE-2022-31181)
- 2022-03-21新华通工程质量检测试验中心网上委托系统XhtAppWebSet.ashx SQL注入漏洞
- 2021-01-19linux-dash监控系统-未授权访问
- 2021-01-19微厦在线学习平台Uploading.ashx文件-任意文件上传漏洞
- 2021-01-19Parse Dashboard-未授权访问
- 2021-01-19MaDDash收集工具2.0.2-目录遍历漏洞(CVE-2018-12522)
- 2021-01-19Linux系统Bash 4.3 (CVE-2014-6271) shellshock-破壳漏洞
- 2016-11-02Adobe Flash Player 远程代码执行漏洞
- 2011-09-22Adobe Flash Player流媒体逻辑错误远程代码执行漏洞
- 2011-04-13Adobe Flash Player对象处理远程代码执行漏洞
- 2010-06-16Adobe Flash Player和AIR无效指针远程代码执行漏洞
- 2010-06-16Adobe Flash Player和Adobe AIR远程代码执行漏洞
- 2010-06-09Adobe Flash Player/Reader/Acrobat AVM2 'newfunction()'远程代码执行漏洞
- 2006-06-28Hashcash hashcash.c array_push函数 远程数据堆缓冲区溢出漏洞