NC Vulnerabilities
1000 vulnerabilities related to NC
- 2026-08-26思考軟體科技｜EFence - 存在3個漏洞
- PoC2026-08-25CVE-2024-1708: ConnectWise ScreenConnect <= 23.9.7 - Path Traversal
- PoC2026-08-25CVE-2026-8236: Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure
- PoC2026-08-21CVE-2026-8237: Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)
- PoC2026-08-18ibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery
- PoC2026-08-16CVE-2026-53976: OpenChamber <1.13.0 - Unauthenticated Arbitrary File Read
- PoC2026-08-16CVE-2026-6826: Concrete CMS <9.5.1 - Unauthenticated File Usage Disclosure
- PoC2026-07-31CVE-2026-24207: NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass
- 2026-07-20Versa Concerto /portalapi/v1/roles/option 权限绕过漏洞（CVE-2025-34027）
- 2026-07-17关于NC Cloud及YonBIP高级版系统的datacollectservlet接口漏洞安全通告
- PoC2026-07-09concrete5-installer: Concrete5 - Installer Page Exposure
- 2026-07-06关于NC系统BapAnaRepDefService的sql注入漏洞的安全通告
- 2026-06-18OpenCATS /index.php 默认口令漏洞
- PoC2026-06-17CVE-2026-27760: OpenCATS - Command Injection
- PoC2026-06-17laravel-sanctum-misconfig: Laravel Sanctum - Stateful Domain CSRF Misconfiguration
- 2026-06-12WordPress WP-Advanced-Search /autocompletion-PHP5.5.php SQL 注入漏洞（CVE-2024-9796）
- 2026-06-12Rancher /v3-public/localProviders/local 默认口令漏洞
- 2026-06-08关于NC系统upload接口filename和billitem参数的任意文件上传漏洞的安全通告
- 2026-05-22用友NC /uapws/service/nc.itf.msgcenter.IMsgCenterWebService SQL 注入漏洞
- 2026-05-12关于NC系统IMsgCenterWebService的sql注入漏洞的安全通告
- 2026-05-12关于NC系统IObaExcelService的sql注入漏洞的安全通告
- PoC2026-05-09CVE-2025-59136: WordPress Gerencianet Oficial <= 3.1.3 - Unauthenticated Order Status Disclosure
- PoC2026-05-09CVE-2025-69411: ionCube Tester Plus <= 1.3 - Local File Inclusion
- PoC2026-05-09unauthenticated-opencode-web: OpenCode Web - Unauthenticated Access
- 2026-05-09用友NC /lfw/chart XML 外部实体注入漏洞
- 2026-05-07OpenCode 存在任意文件读取漏洞
- 2026-05-06OpenCode网页存在未授权访问
- 2026-04-30用友 NC /uapws/service/nc.itf.bap.oba.IObaExcelService XML 外部实体注入漏洞
- 2026-04-30用友 NC /uapws/service/nc.itf.bd.crm.ICustomerImportToNcService XML 外部实体注入漏洞
- 2026-04-30用友 NC /uapws/service/nc.itf.bd.crm.ICurrtypeExportToCrmService XML 外部实体注入漏洞
- 2026-04-29OpenCode /file/content 文件读取漏洞
- 2026-04-24用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService XML 外部实体注入漏洞
- 2026-04-24用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService SQL 注入漏洞
- 2026-04-24用友 NC /uapws/service/nc.uap.oba.word.webservice.IServiceEntryPoint XML 外部实体注入漏洞
- 2026-04-24用友 NC /uapws/service/nc.itf.bap.oba.IObaWordService XML 外部实体注入漏洞
- 2026-04-24用友 NC /uapws/service/nc.itf.bd.crm.IPsndocExportToCrmService XML 外部实体注入漏洞
- 2026-04-24用友 NC /uapws/service/nc.uap.oba.wordWebservice.IServiceEntry XML 外部实体注入漏洞
- 2026-04-14用友NC Cloud /ncchr/pm/ref/indiIssued/blobRefClassSearch 代码执行漏洞
- 2026-04-14用友NC /portal/pt/M0dUlE/redeploy SQL 注入漏洞
- 2026-04-14用友NC Cloud /ebvp/infopub/show_download_content;.js SQL 注入漏洞
- 2026-04-10Owncast /api/admin/serverconfig 默认口令漏洞
- PoC2026-04-09CVE-2025-59716: ownCloud Guests - User Enumeration
- PoC2026-04-09owncast-default-login: Owncast - Default Credentials
- 2026-04-08Owncast存在默认口令
- 2026-04-03Glances /api/4/config 信息泄露漏洞 （CVE-2026-30928）
- 2026-04-01关于NC Cloud系统的ESB信息泄漏的安全通告
- 2026-03-30技嘉｜Performance Library - Insecure Deserialization
- PoC2026-03-25CVE-2026-30928: Glances - Information Disclosure
- PoC2026-03-25CVE-2026-32583: Webnus Inc. Modern Events Calendar - Broken Access Control
- PoC2026-03-25CVE-2026-32596: Glances - Information Disclosure
- 2026-03-20关于NC系统查询报表对象时的sql注入漏洞的安全通告
- 2026-03-19Glances存在信息泄漏(CVE-2026-32596)
- 2026-03-16关于NC系统天威CA的sql注入漏洞的安全通告
- PoC2026-03-13用友 NC /portal/pt/portalpage/importPml XML 外部实体注入漏洞
- PoC2026-03-09apache-syncope-default-login: Apache Syncope - Default Login
- PoC2026-02-27CVE-2022-44588: Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection
- PoC2026-02-25用友 NC /portal/pt/oacoSchedulerEvents/deleteEvent SQL 注入漏洞
- PoC2026-02-25用友 NC /portal/pt/servlet/workflowImageServlet/doPost SQL 注入漏洞
- PoC2026-02-24CVE-2024-13097: WP Finance Plugin <= 1.3.6 - Cross-Site Scripting
- PoC2026-02-24CVE-2024-13634: Post Sync Plugin <= 1.1 - Cross-Site Scripting
- PoC2026-02-24CVE-2025-8266: ChanCMS <= 3.1. - Remote Code Execution
- 2026-02-13Cisco Asyncos 整数溢出漏洞 可导致远程代码执行
- 2026-02-06用友 NC /uapws/service/nc.itf.bd.crm.IUserExportToCrmService XML 外部实体注入漏洞
- 2026-02-06用友 NC /uapws/service/nc.itf.bd.crm.IInvbasdocExportToCrmService XML 外部实体注入漏洞
- PoC2026-02-06用友 NC /uapws/service/nc.itf.bd.crm.IMeasdocExportToCrmService XML 外部实体注入漏洞
- PoC2026-02-06用友 NC /uapws/service/nc.itf.ses.inittool.PortalSESInitToolService XML 外部实体注入漏洞
- PoC2026-02-06用友NC /portal/pt/psnImage/download SQL 注入漏洞
- 2026-02-06关于NC、NC Cloud及YonBIP高级版系统的ActionInvokeService任意文件上传漏洞的安全通告
- PoC2026-02-04CVE-2026-22812: OpenCode < 1.0.216 - Unauthenticated Remote Code Execution
- PoC2026-02-03wordpress-joinchat-fpd: WordPress Joinchat - Full Path Disclosure
- PoC2026-02-03confluence-xslt-macro-ssrf: Atlassian Confluence XSLT Macro - Server-Side Request Forgery
- 2026-02-03OpenClaw Gateway 存在未授权访问漏洞
- 2026-01-28关于NC系统uimapi的sql注入漏洞的安全通告
- 2026-01-28关于NC及NC Cloud系统管理员账号弱密码的安全通告
- PoC2026-01-24CVE-2025-49533: Adobe Experience Manager Forms - Insecure Deserialization
- PoC2026-01-24azure-functions-hostjson-exposure: Azure Functions host.json Configuration Exposure
- PoC2026-01-24aspnet-launchsettings-exposure: ASP.NET Launch Settings - Exposure
- PoC2026-01-24rancher-incomplete-setup: Rancher - Incomplete Setup Exposure
- 2026-01-23OpenCode /session 代码执行漏洞（CVE-2026-22812）
- 2026-01-23OpenCode /session 代码执行漏洞（CVE-2026-22812）
- 2026-01-19关于NC及NC Cloud系统的任意文件读取漏洞的安全通告
- PoC2026-01-16opencart-error-log: OpenCart Error Log Disclosure
- PoC2026-01-16wp-acf-fpd: Advanced Custom Fields (ACF) - Full Path Disclosure
- PoC2026-01-16wp-advanced-iframe-fpd: WordPress Advanced iFrame - Full Path Disclosure
- PoC2026-01-16wp-advanced-responsive-video-embedder-fpd: WordPress Advanced Responsive Video Embedder - Full Path Disclosure
- PoC2026-01-16wp-easy-fancybox-fpd: Easy FancyBox - Full Path Disclosure
- 2026-01-13OpenCode AI远程命令执行漏洞（CVE-2026-22812）
- PoC2026-01-08CVE-2025-13486: Advanced Custom Fields Extended < 0.9.2 - Remote Code Execution
- PoC2026-01-08wordfence-config-disclosure: WordPress Wordfence - Configuration File Disclosure
- PoC2026-01-08wordfence-rules-disclosure: WordPress Wordfence - Rules File Disclosure
- PoC2026-01-08wordfence-waf-logs-disclosure: WordPress Wordfence - WAF Logs and Data Disclosure
- PoC2026-01-08wp-maintenance-mode-fpd: WordPress WP Maintenance Mode - Full Path Disclosure
- PoC2026-01-08wp-wordfence-fpd: Wordfence - Full Path Disclosure
- PoC2026-01-08wp-acf-fpd: Advanced Custom Fields (ACF) - Full Path Disclosure
- PoC2026-01-08wp-easy-fancybox-fpd: Easy FancyBox - Full Path Disclosure
- 2025-12-30微力同步-VeriSync resources 任意文件读取漏洞
- 2025-12-29GreenCMS 路径遍历漏洞
- 2025-12-19用友NC及NC Cloud系统 /uapws/service/nc.itf.bap.service.IBapIOService getBapTableDatas SQL 注入漏洞
- 2025-12-19Campcodes Advanced_voting_management_system不正确的权限分配漏洞(CVE-2025-14889)
- 2025-12-19用友NC及NC Cloud系统 /uapws/service/nc.itf.bap.service.IBapIOService getBapTableDatas SQL 注入漏洞
- 2025-12-16（CVE-2023-53873）SyncBreeze 15.2.24登录认证机制拒绝服务漏洞
- 2025-12-05用友NC /portal/pt/portalcombo/importCombo XML 外部实体注入漏洞
- 2025-12-05用友NC /portal/pt/portalcombo/importCombo XML 外部实体注入漏洞
- PoC2025-12-02CVE-2019-25213: WordPress Advanced Access Manager - Path Traversal
- PoC2025-12-02CVE-2025-10210: ChanCMS <= 3.3.0 - SQL Injection
- PoC2025-12-02CVE-2025-10211: ChanCMS <= 3.3.0 - Server-Side Request Forgery
- PoC2025-12-02aem-anonymous-write: Adobe Experience Manager (AEM) - Anonymous JCR Node Creation
- PoC2025-12-02functions-php-disclosure: functions.php Full Path Disclosure
- 2025-11-27用友NC存在 oncelogin/getAuth SQL注入漏洞
- 2025-11-14用友NC /portal/pt/oacoSchedulerEvents/uncancelEvent SQL 注入漏洞
- 2025-11-14用友NC /ebvp/register/qrySubPurchaseOrgByParentPk SQL 注入漏洞
- 2025-11-14用友NC /portal/pt/oacoSchedulerEvents/uncancelEvent SQL 注入漏洞
- 2025-11-14用友NC /ebvp/register/qrySubPurchaseOrgByParentPk SQL 注入漏洞
- 2025-11-11关于NC Cloud、BIP高级版系统HR模块多语敏感信息泄露漏洞的安全通告
- 2025-11-11关于NC Cloud、BIP高级版系统HR模块多语敏感信息泄露漏洞的安全通告
- 2025-11-07用友 NC Cloud /ncchr/pm/obj/queryPsnInfo SQL 注入漏洞
- 2025-11-07用友 NC Cloud /ncchr/pm/obj/queryPsnInfo SQL 注入漏洞
- 2025-11-03用友NC /portal/pt/infopathimport/importExcelTemplate pageId 文件上传漏洞
- 2025-11-03用友NC /portal/pt/infopathimport/importExcelTemplate pageId 文件上传漏洞
- 2025-10-29关于NC系统taskReport的sql注入漏洞的安全通告
- 2025-10-22用友NC OAUserQryServlet 反序列化漏洞
- 2025-10-13用友NC OAUserAuthenticationServlet 反序列化漏洞
- 2025-10-11用友NC ContactsQueryServiceServlet 反序列化漏洞
- PoC2025-10-11用友NC UserSynchronizationServlet 反序列化漏洞
- 2025-10-11用友NC ContactsFuzzySearchServlet 反序列化漏洞
- 2025-10-11用友 NC /portal/pt/nc5x/fwd 存在跨站点脚本攻击漏洞
- 2025-10-11Rancher Rancher 权限管理不当漏洞
- 2025-10-10用友NC fwd XSS漏洞
- 2025-10-09（CVE-2025-54253）Adobe Experience Manager配置错误导致任意代码执行漏洞
- 2025-10-07（CVE-2025-61882）Oracle Concurrent Processing BI Publisher Integration 远程接管漏洞
- 2025-09-29Tencent WeKnora 未授权 服务器端请求伪造(SSRF)漏洞
- 2025-09-29Cisco Secure Firewall Adaptive Security Appliance 缓冲区溢出漏洞
- 2025-09-28NVIDIA Triton Inference Server 未授权 命令注入漏洞
- 2025-09-18QNAP Qsync Central 路径遍历漏洞
- 2025-09-18QNAP Qsync Central 路径遍历漏洞
- 2025-09-18QNAP Qsync Central SQL注入漏洞
- 2025-09-10（CVE-2025-10211）ChanCMS 3.3.0 CollectController SSRF漏洞
- 2025-09-10(CVE-2025-10210) ChanCMS Search功能SQL注入漏洞
- 2025-09-09（CVE-2025-54251）Adobe Experience Manager XML注入漏洞导致安全功能绕过
- 2025-09-09(CVE-2025-54249) Adobe Experience Manager SSRF漏洞导致安全功能绕过
- 2025-09-05ChanCMS系统/api/sysUser/login存在默认弱口令
- PoC2025-09-05用友NC IMsgCenterWebService 命令执行漏洞
- PoC2025-09-05用友nc soapRequest.ajax 命令执行漏洞
- 2025-09-05用友NC IMsgCenterWebService 命令执行漏洞
- 2025-09-05用友nc soapRequest.ajax 命令执行漏洞
- 2025-09-04用友NC存在 PaWfm2/open SQL注入漏洞
- 2025-09-01用友NC系统workflowService接口SQL注入漏洞
- 2025-09-01用友NC importTemplate XML实体注入（XXE）漏洞
- 2025-09-01CVE-2019-3396: Atlassian Confluence Path Traversal
- 2025-09-01yonyou-nc-arbitrary-file-upload: Yonyou NC Arbitrary file upload
- 2025-09-01yonyou-nc-monitorservlet-rce: Yonyou NC monitors servlet RCE
- 2025-09-01yonyou-nc-ncmessageservlet-rce: Yonyou NC messages servlet RCE
- 2025-09-01yonyou-nc-portalfile-fileread: 用友NC portal/file 任意文件读取漏洞
- 2025-09-01yonyou-nc-uploadservlet-rce: Yonyou NC upload servlet rce
- 2025-09-01nacos-sync-login-bypass: Nacos-Sync 未授权进后台
- 2025-08-29用友NC /portal/pt/mtapptimeline/doApply SQL 注入漏洞
- 2025-08-29用友NC /portal/pt/mtapptimeline/doApply SQL 注入漏洞
- 2025-08-28用友NC content存在XXE实体注入漏洞
- 2025-08-28Dell KACE Systems Management Appliance (K1000)存在命令执行漏洞(CVE-2019-20504)
- 2025-08-28Network Technologies Inc ENVIROMUX存在默认口令
- 2025-08-27用友NC getOtherData 存在SQL注入漏洞
- 2025-08-26用友NC mtapptimeline/doApply 存在SQL注入漏洞
- 2025-08-25Atlassian Confluence /json/setup-restore.action 文件上传漏洞（CVE-2023-22518）
- 2025-08-25用友NC doSingUp SQL注入漏洞
- 2025-08-25Atlassian Confluence /json/setup-restore.action 文件上传漏洞（CVE-2023-22518）
- 2025-08-22用友NC /portal/pt/oacoSchedulerEvents/changeEvent SQL 注入漏洞
- 2025-08-22用友NC /portal/pt/oacoSchedulerEvents/changeEvent SQL 注入漏洞
- 2025-08-21用友NC /portal/pt/oncelogin/getAuth SQL 注入漏洞
- 2025-08-21用友NC /portal/pt/oncelogin/getAuth SQL 注入漏洞
- 2025-08-20ETQ Reliance存在反射xss漏洞(CVE-2025-34141)
- PoC2025-08-15用友NC importExcelTemplate 任意文件上传
- 2025-08-15（CVE-2025-5047）Autodesk AutoCAD解析DGN文件未初始化变量漏洞
- 2025-08-15（CVE-2025-5046）Autodesk AutoCAD DGN文件处理越界读漏洞
- 2025-08-13ChanCMS 存在远程命令执行漏洞（CVE-2025-8266）
- 2025-08-12用友NC importCombo XML实体注入（XXE）漏洞
- 2025-08-12关于NC系统oncelogin getAuth 接口存在sql注入漏洞的修复通告
- 2025-08-11用友NC系统pagesServlet接口SQL注入漏洞
- 2025-08-08用友NC /ebvp/infopub/warningDetailInfo SQL 注入漏洞
- 2025-08-08用友NC /ebvp/advorappcoll/complainbilldetail SQL 注入漏洞
- 2025-08-08用友NC /portal/pt/downTax/download SQL 注入漏洞
- 2025-08-08用友NC /portal/pt/servlet/pagesServlet/doPost SQL 注入漏洞
- 2025-08-08用友NC /ebvp/infopub/warningDetailInfo SQL 注入漏洞
- 2025-08-08用友NC /ebvp/advorappcoll/complainbilldetail SQL 注入漏洞
- 2025-08-08用友NC /portal/pt/downTax/download SQL 注入漏洞
- 2025-08-08用友NC /portal/pt/servlet/pagesServlet/doPost SQL 注入漏洞
- 2025-08-07InvisionCommunity存在代码注入漏洞(CVE-2025-47916)
- 2025-08-06(CVE-2025-21014) Emergency SoS应用组件导出不当导致敏感信息泄露漏洞
- PoC2025-08-01CVE-2023-49105: OwnCloud - WebDAV API Authentication Bypass
- PoC2025-08-01CVE-2010-1345: Joomla! Component Cookex Agency CKForms - Local File Inclusion
- PoC2025-08-01CVE-2010-4231: Camtron CMNC-200 IP Camera - Directory Traversal
- PoC2025-08-01CVE-2011-4618: Advanced Text Widget < 2.0.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2013-7240: WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal
- PoC2025-08-01CVE-2015-6477: Nordex NC2 - Cross-Site Scripting
- PoC2025-08-01CVE-2015-8399: Atlassian Confluence <5.8.17 - Information Disclosure
- PoC2025-08-01CVE-2016-1000132: WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting
- PoC2025-08-01CVE-2016-7552: Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass
- PoC2025-08-01CVE-2018-10201: Ncomputing vSPace Pro 10 and 11 - Directory Traversal
- PoC2025-08-01CVE-2018-11231: Opencart Divido - Sql Injection
- PoC2025-08-01CVE-2018-15745: Argus Surveillance DVR 4.0.0.0 - Local File Inclusion
- PoC2025-08-01CVE-2018-16716: NCBI ToolBox - Directory Traversal
- PoC2025-08-01CVE-2018-19207: WP GDPR Compliance < 1.4.3 - Unauthenticated Call Any Action or Update Any Option
- PoC2025-08-01CVE-2018-19386: SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting
- PoC2025-08-01CVE-2018-5230: Atlassian Jira Confluence - Cross-Site Scripting
- PoC2025-08-01CVE-2018-7251: Anchor CMS 0.12.3 - Error Log Exposure
- PoC2025-08-01CVE-2019-16469: Adobe Experience Manager - Expression Language Injection
- PoC2025-08-01CVE-2019-17662: ThinVNC 1.0b1 - Authentication Bypass
- PoC2025-08-01CVE-2019-20504: Dell KACE Systems Management Appliance (K1000) 6.4.120756 - Remote Code Execution
- PoC2025-08-01CVE-2019-2588: Oracle Business Intelligence - Path Traversal
- PoC2025-08-01CVE-2019-2616: Oracle Business Intelligence/XML Publisher - XML External Entity Injection
- PoC2025-08-01CVE-2019-2767: Oracle Business Intelligence Publisher - XML External Entity Injection
- PoC2025-08-01CVE-2019-3396: Atlassian Confluence Server - Path Traversal
- PoC2025-08-01CVE-2019-3398: Atlassian Confluence Download Attachments - Remote Code Execution
- PoC2025-08-01CVE-2019-5127: YouPHPTube Encoder 2.3 - Remote Command Injection
- PoC2025-08-01CVE-2019-5128: YouPHPTube Encoder - Arbitrary File Write
- PoC2025-08-01CVE-2019-5129: YouPHPTube Encoder 2.3 - Command Injection
- PoC2025-08-01CVE-2019-8086: Adobe Experience Manager - XML External Entity Injection
- PoC2025-08-01CVE-2020-16139: Cisco Unified IP Conference Station 7937G - Denial-of-Service
- PoC2025-08-01CVE-2020-29597: IncomCMS 2.0 - Arbitrary File Upload
- PoC2025-08-01CVE-2020-3187: Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal
- PoC2025-08-01CVE-2020-3452: Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion
- PoC2025-08-01CVE-2020-35598: Advanced Comment System 1.0 - Local File Inclusion
- PoC2025-08-01CVE-2020-6308: SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery
- PoC2025-08-01CVE-2021-24169: WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting
- PoC2025-08-01CVE-2021-24370: WordPress Fancy Product Designer <4.6.9 - Arbitrary File Upload
- PoC2025-08-01CVE-2021-26084: Confluence Server - Remote Code Execution
- PoC2025-08-01CVE-2021-26085: Atlassian Confluence Server - Local File Inclusion
- PoC2025-08-01CVE-2021-27748: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery
- PoC2025-08-01CVE-2021-30497: Ivanti Avalanche 6.3.2 - Local File Inclusion
- PoC2025-08-01CVE-2021-31602: Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass
- PoC2025-08-01CVE-2021-3654: Nova noVNC - Open Redirect
- PoC2025-08-01CVE-2021-37589: Virtua Software Cobranca <12R - Blind SQL Injection
- PoC2025-08-01CVE-2021-42237: Sitecore Experience Platform Pre-Auth RCE
- PoC2025-08-01CVE-2021-44529: Ivanti EPM Cloud Services Appliance Code Injection
- PoC2025-08-01CVE-2021-46387: Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting
- PoC2025-08-01CVE-2022-1007: WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-1392: WordPress Videos sync PDF <=1.7.4 - Local File Inclusion
- PoC2025-08-01CVE-2022-1952: WordPress eaSYNC Booking <1.1.16 - Arbitrary File Upload
- PoC2025-08-01CVE-2022-25226: ThinVNC - Authentication Bypass
- PoC2025-08-01CVE-2022-26134: Confluence - Remote Code Execution
- PoC2025-08-01CVE-2022-26138: Atlassian Questions For Confluence - Hardcoded Credentials
- PoC2025-08-01CVE-2022-27927: Microfinance Management System 1.0 - SQL Injection
- PoC2025-08-01CVE-2022-40022: Symmetricom SyncServer Unauthenticated - Remote Command Execution
- PoC2025-08-01CVE-2022-4059: Cryptocurrency Widgets Pack < 2.0 - SQL Injection
- PoC2025-08-01CVE-2022-43014: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-43015: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-43016: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-43017: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-43018: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-48012: OpenCATS 0.9.7 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-1263: Coming Soon & Maintenance < 4.1.7 - Unauthenticated Post/Page Access
- PoC2025-08-01CVE-2023-1671: Sophos Web Appliance - Remote Code Execution
- PoC2025-08-01CVE-2023-22515: Atlassian Confluence - Privilege Escalation
- PoC2025-08-01CVE-2023-22518: Atlassian Confluence Server - Improper Authorization
- PoC2025-08-01CVE-2023-22527: Atlassian Confluence - Remote Code Execution
- PoC2025-08-01CVE-2023-27032: PrestaShop AdvancedPopupCreator - SQL Injection
- PoC2025-08-01CVE-2023-27292: OpenCATS - Open Redirect
- PoC2025-08-01CVE-2023-30777: Advanced Custom Fields < 6.1.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-3188: Owncast - Server Side Request Forgery
- PoC2025-08-01CVE-2023-32563: Ivanti Avalanche - Remote Code Execution
- PoC2025-08-01CVE-2023-34020: Uncanny Toolkit for LearnDash - Open Redirection
- PoC2025-08-01CVE-2023-42343: OpenCMS - Cross-Site Scripting
- PoC2025-08-01CVE-2023-42344: OpenCMS - XML external entity (XXE)
- PoC2025-08-01CVE-2023-49103: OwnCloud - Phpinfo Configuration
- PoC2025-08-01CVE-2023-49230: Peplink Balance Two before 8.4.0 - Unauthenticated Config Upload
- PoC2025-08-01CVE-2023-6379: OpenCMS 14 & 15 - Cross Site Scripting
- PoC2025-08-01CVE-2023-6380: OpenCms 14 & 15 - Open Redirect
- PoC2025-08-01CVE-2024-0305: Ncast busiFacade - Remote Command Execution
- PoC2025-08-01CVE-2024-10516: Swift Performance Lite < 2.3.7.2 - Local PHP File Inclusion
- PoC2025-08-01CVE-2024-1709: ConnectWise ScreenConnect 23.9.7 - Authentication Bypass
- PoC2025-08-01CVE-2024-21683: Atlassian Confluence Data Center and Server - Remote Code Execution
- PoC2025-08-01CVE-2024-25669: CaseAware a360inc - Cross-Site Scripting
- PoC2025-08-01CVE-2024-31851: CData Sync < 23.4.8843 - Path Traversal
- PoC2025-08-01CVE-2024-33605: Sharp Multifunction Printers - Directory Listing
- PoC2025-08-01CVE-2024-33610: Sharp Multifunction Printers - Cookie Exposure
- PoC2025-08-01CVE-2024-3822: Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2024-38472: Apache HTTPd Windows UNC - Server-Side Request Forgery
- PoC2025-08-01CVE-2024-38653: Ivanti Avalanche SmartDeviceServer - XML External Entity
- PoC2025-08-01CVE-2024-46938: Sitecore Experience Platform <= 10.4 - Arbitrary File Read
- PoC2025-08-01CVE-2024-6049: Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal
- PoC2025-08-01CVE-2024-7188: Bylancer Quicklancer 2.4 G - SQL Injection
- PoC2025-08-01CVE-2024-7591: Kemp LoadMaster Load Balancer - Unauthenticated Command Injection
- PoC2025-08-01CVE-2024-8963: Ivanti Cloud Services Appliance - Path Traversal
- PoC2025-08-01CVE-2024-9796: WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection
- PoC2025-08-01CVE-2025-2075: Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
- PoC2025-08-01CVE-2025-2709: Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2025-2710: Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2025-2711: Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2025-2712: Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2025-27218: Sitecore Experience Manager (XM)/Experience Platform (XP) 10.4 - Insecure Deserialization
- PoC2025-08-01CVE-2025-2748: Kentico Xperience CMS - Unauthenticated Stored XSS
- PoC2025-08-01CVE-2025-34026: Versa Concerto Actuator Endpoint - Authentication Bypass
- PoC2025-08-01CVE-2025-34027: Versa Concerto API Path Based - Authentication Bypass
- PoC2025-08-01CVE-2025-34141: ETQ Reliance - Reflected XSS via SQLConverterServlet
- PoC2025-08-01CVE-2025-34143: ETQ Reliance - Authentication Bypass via Trailing Space
- PoC2025-08-01CNVD-2020-23735: Xxunchi Local File read
- PoC2025-08-01CVE-2015-6477: Nordex NC2 - Cross-Site Scripting
- PoC2025-08-01CVE-2015-8399: Atlassian Confluence configuration files read
- PoC2025-08-01CVE-2019-5128: YouPHPTube Encoder base64Url getImageMP4.php命令注入漏洞
- PoC2025-08-01CVE-2019-5129: YouPHPTube Encoder getSpiritsFromVideo.php base64Url命令注入漏洞
- PoC2025-08-01CVE-2021-26084: Confluence Server OGNL injection - RCE
- PoC2025-08-01CVE-2021-26085: Confluence Pre-Authorization Arbitrary File Read
- PoC2025-08-01CVE-2021-3654: noVNC Open Redirect
- PoC2025-08-01unattached-disk-encryption-disabled: Encryption for Unattached Disks - Disabled
- PoC2025-08-01unattached-vminstance-encryption-disabled: Encryption for VM Instance Disks - Disabled
- PoC2025-08-01sse-smk-disabled: Server-Side Encryption with Service Managed Key - Disabled
- PoC2025-08-01password-policy-length-unconfigured: RAM Password Policy requires Minimum Length 14 or Greater
- PoC2025-08-01password-policy-symbol-unconfigured: RAM Password Policy requires atleast One Symbol - Unconfigured
- PoC2025-08-01password-policy-uppercase-unconfigured: RAM Password Policy requires atleast One Uppercase - Unconfigured
- PoC2025-08-01mysql-audit-disabled: MySQL Database Instances - SQL Auditing Disabled
- PoC2025-08-01CVE-2022-22963: Spring Cloud Function SPEL 远程命令执行漏洞
- PoC2025-08-01rds-audit-disabled: RDS Database Instances - SQL Auditing Disabled
- PoC2025-08-01transparent-encryption-disabled: Transparent Data Encryption - Disabled
- PoC2025-08-01CVE-2022-26134: Atlassian Confluence OGNL注入漏洞
- PoC2025-08-01ec2-imdsv2: Enforce IMDSv2 on EC2 Instances
- PoC2025-08-01CVE-2023-1671: Sophos Web Appliance - Remote Code Execution
- PoC2025-08-01CVE-2023-22515: Atlassian Confluence - Privilege Escalation
- PoC2025-08-01CVE-2023-22518: Atlassian Confluence Server - Improper Authorization
- PoC2025-08-01unencrypted-aws-ami: Unencrypted AWS AMI
- PoC2025-08-01CVE-2023-22527: Atlassian Confluence远程代码执行漏洞
- PoC2025-08-01eks-kubernetes-secrets-encryption: EKS Kubernetes Secrets not Encrypted
- PoC2025-08-01firehose-server-destination-encryption: Firehose Delivery Stream Destination Encryption - Disabled
- PoC2025-08-01firehose-server-side-encryption: Firehose Delivery Stream Server-Side Encryption - Disabled
- PoC2025-08-01CVE-2024-0305: Ncast盈可视高清智能录播系统存在RCE漏洞
- PoC2025-08-01azure-lb-create-update-missing: Azure Load Balancer Create or Update Alert Not Configured
- PoC2025-08-01CVE-2024-50623: Cleo Synchronization 任意文件读取
- PoC2025-08-01azure-openai-managed-identity-not-used: Azure OpenAI Service Instance Managed Identity Not Used
- PoC2025-08-01azure-openai-private-endpoints-unconfigured: Azure OpenAI Service Instances Not Using Private Endpoints
- PoC2025-08-01azure-functionapp-access-keys-missing: Azure Function Access Keys Configuration
- PoC2025-08-01azure-functionapp-admin-privileges: Azure Functions with Admin Privileges
- PoC2025-08-01azure-functionapp-appinsights-missing: Application Insights Integration for Azure Function Apps
- PoC2025-08-01azure-functionapp-public-exposure: Exposed Azure Functions
- PoC2025-08-01azure-functionapp-system-assigned-missing: System-Assigned Managed Identities for Azure Functions
- PoC2025-08-01azure-functionapp-user-assigned-id-missing: User-Assigned Managed Identities for Azure Functions
- PoC2025-08-01azure-functionapp-vnet-integration-missing: Virtual Network Integration for Azure Functions Not Enabled
- PoC2025-08-01oracle-business-intelligence-password: Oracle Business Intelligence Default Login
- PoC2025-08-01rancher-default-password: Rancher Default Login
- PoC2025-08-01azure-storage-encryption-missing: Azure Storage Infrastructure Encryption Not Enabled
- PoC2025-08-01azure-vm-tags-schema-noncompliant: Azure VM Tags Schema Non-compliant
- PoC2025-08-01azure-disk-encryption-unattached-volumes: Azure Disk Encryption Not Enabled for Unattached Disk Volumes
- PoC2025-08-01azure-lb-unused: Azure Unused Load Balancer Check
- PoC2025-08-01azure-vm-performance-diagnostics-unenabled: Azure VM Performance Diagnostics Feature Not Enabled
- PoC2025-08-01azure-vmss-load-balancer-unassociated: Azure VMSS Load Balancer Unassociated
- PoC2025-08-01gcloud-mig-no-load-balancer: Managed Instance Group Not Using Load Balancer
- PoC2025-08-01gcloud-func-auto-runtime-updates-disabled: Automatic Runtime Security Updates Disabled in Google Cloud Functions
- PoC2025-08-01gcloud-func-cmek-not-used: No Customer-Managed Encryption Keys in Google Cloud Functions
- PoC2025-08-01gcloud-func-inactive-svc-acc: Inactive Service Accounts in Google Cloud Functions
- PoC2025-08-01gcloud-func-min-instances-unset: Unset Minimum Instances for Cloud Functions
- PoC2025-08-01gcloud-func-missing-labels: Missing User-Defined Labels in Google Cloud Functions
- PoC2025-08-01gcloud-func-no-vpc-access: No Serverless VPC Access in Google Cloud Functions
- PoC2025-08-01gcloud-func-public-access: Publicly Accessible Google Cloud Functions
- PoC2025-08-01gcloud-func-secrets-unmanaged: Use Secrets Manager for Managing Secrets in Google Cloud Functions
- PoC2025-08-01gcloud-func-unrestricted-outbound: Unrestricted Outbound Network Access in Google Cloud Functions
- PoC2025-08-01gcp-cloud-func-gen1-deprecated: Deprecated 1st Generation Google Cloud Functions
- PoC2025-08-01gcp-func-default-svc-acc: Google Cloud Functions Using Default Service Account
- PoC2025-08-01concretecms-9-1-3-xpath-injection: concretecms-9.1.3 - XPath注入 - 文件路径遍历
- PoC2025-08-01dahua-dss-login-action-rce: 大华DSS Digital Surveillance System系统login_login.action存在远程命令执行漏洞
- PoC2025-08-01gcloud-gke-transparent-encryption-disabled: GKE Clusters Without Inter-Node Transparent Encryption
- PoC2025-08-01gcloud-ssl-policy-insecure-ciphers: Insecure SSL Cipher Suites in GCP Load Balancers
- PoC2025-08-01hanming-video-conferencing-file-read: Hanming Video Conferencing File Read
- PoC2025-08-01k8s-enc-prov-conf: Ensure that encryption providers are configured
- PoC2025-08-01allow-unencrypted-ftp: Allow Unencrypted FTP
- PoC2025-08-01metersphere-plugincontroller-rce: MeterSphere PluginController Pre-auth RCE
- PoC2025-08-01password-cleartext-encryption: Store Passwords Using Reversible Encryption Check
- PoC2025-08-01nuuo-file-inclusion: Nuuo file inclusion
- PoC2025-08-01remote-assistance-enabled: Check Remote Assistance Misconfiguration
- PoC2025-08-01reversible-encryption-passwords-enabled: Store Passwords Using Reversible Encryption Enabled
- PoC2025-08-01unencrypted-file-sharing-enabled: Unencrypted File Sharing Enabled
- PoC2025-08-01xinclude-injection: XInclude Injection - Detection
- PoC2025-08-01ancestrycdn-angular-csp-bypass: Content-Security-Policy Bypass - AncestryCDN Angular
- PoC2025-08-01bytedance-sso-csp-bypass: Content-Security-Policy Bypass - ByteDance SSO
- PoC2025-08-01digitalocean-anchor-csp-bypass: Content-Security-Policy Bypass - DigitalOcean Anchor
- PoC2025-08-01im-apps-sync-csp-bypass: Content-Security-Policy Bypass - IM Apps Sync
- PoC2025-08-01livechatinc-api-csp-bypass: Content-Security-Policy Bypass - LiveChatInc API
- PoC2025-08-01topsec-maincgi-cookie-rce: 天融信防火墙 Cookie 参数命令执行漏洞
- PoC2025-08-01topsec-maincgi-rce: 天融信TOPSEC_maincgi.cgi远程命令执行
- PoC2025-08-01syncfusion-cdn-csp-bypass: Content-Security-Policy Bypass - Syncfusion CDN
- PoC2025-08-01wanhu-oa-tele-conference-service-xxe: 万户OA TeleConferenceService XXE注入漏洞
- PoC2025-08-01yongyou-nc-changeevent-sqli: 用友NC changeEvent SQL注入漏洞
- PoC2025-08-01yonyou-cloud-jsinvoke-uploadfile: 用友 NC Cloud jsinvoke 任意文件上传
- PoC2025-08-01yonyou-nc-accept-upload: YonYou NC Accept Upload
- PoC2025-08-01yonyou-nc-bsh-servlet-bshservlet-rce: 用友 NC bsh.servlet.BshServlet 远程命令执行漏洞
- PoC2025-08-01yonyou-nc-cloud-getStaffInfo-sqli: Yonyou NC-Cloud getStaffInfo SQL Injection
- PoC2025-08-01yonyou-nc-cloud-uapjs-rce: 用友 Yonyou NC uapjs RCE
- PoC2025-08-01yonyou-nc-download-fileread: 用友NC download文件存在任意文件读取漏洞
- PoC2025-08-01yonyou-nc-portalsesInittoolservice-disclosure: 用友 portalsesInittoolservice 泄露数据库账号密码
- PoC2025-08-01yonyou-nc-savexmltofileservlet-fileupload: YONYOU NC saveXmlToFIleServlet接口文件上传
- PoC2025-08-01yonyou-nc-word-docx-fileread: 用友NC word.docx存在任意文件读取漏洞
- PoC2025-08-01yonyou-nccloud-iupdateservice-xxe: 用友NC Cloud IUpdateService接口存在XXE漏洞
- PoC2025-08-01yonyou-nccloud-ncchr-fileupload: 用友财务系统任意文件上传漏洞
- PoC2025-08-01yonyou-nccloud-uapjs-upload-rce: 用友 NC Cloud 文件上传
- PoC2025-08-01yonyou-nccloud-uploadchunk-fileupload: 用友NC Cloud uploadChunk 任意文件上传漏洞
- PoC2025-08-01CNVD-2020-23735: Xxunchi CMS - Local File Inclusion
- PoC2025-08-01CNVD-2021-30167: UFIDA NC BeanShell Remote Command Execution
- PoC2025-08-01CNVD-C-2023-76801: UFIDA NC uapjs - Remote Code Execution
- PoC2025-08-01CVE-2018-11138: Quest KACE System Management Appliance 8.0.318 - Remote Code Execution
- PoC2025-08-01CVE-2019-11886: Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation
- PoC2025-08-01CVE-2019-9874: Sitecore Experience Platform - Deserialization of Untrusted Data
- PoC2025-08-01CVE-2021-26072: Atlassian Confluence < 5.8.6 - Server-Side Request Forgery
- PoC2025-08-01CVE-2025-54249: Adobe Experience Manager ≤ 6.5.23.0 – SSRF
- PoC2025-08-01CVE-2025-54251: Adobe Experience Manager ≤ 6.5.23.0 - XML Injection
- PoC2025-08-01aem-felix-console: Adobe Experience Manager Felix Console - Default Login
- PoC2025-08-01oracle-business-intelligence-login: Oracle Business Intelligence Default Login
- PoC2025-08-01opencats-default-login: OpenCATS - Default Login
- PoC2025-08-01rancher-default-login: Rancher Default Login
- PoC2025-08-01concrete5-install: Concrete5 Install Panel
- PoC2025-08-01atom-sync-remote: Atom Synchronization Exposure
- PoC2025-08-01ioncube-loader-wizard: ioncube Loader Wizard Disclosure
- PoC2025-08-01exposed-glances-api: Exposed Glances API
- PoC2025-08-01aem-xss-childlist: Adobe Experience Manager Childlist Selector - Cross-Site Scripting
- PoC2025-08-01aem-setpreferences-xss: Adobe Experience Manager - Cross-Site Scripting
- PoC2025-08-01aem-xss-childlist-selector: Adobe Experience Manager - Cross-Site Scripting
- PoC2025-08-01confluence-dashboard: Confluence Dashboard Exposed
- PoC2025-08-01concrete-installer: Concrete Installer
- PoC2025-08-01confluence-installer: Confluence Installation Page - Exposure
- PoC2025-08-01kace-sma-installer: KACE Systems Management Appliance - Installer
- PoC2025-08-01owncloud-installer-exposure: OwnCloud Installer Exposure
- 2025-08-01kentico-13-auth-bypass-wt-2025-0006: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)
- 2025-08-01kentico-13-auth-bypass-wt-2025-0011: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)
- PoC2025-08-01mfp-unauth-exposure: Multi-function Printer - Unauthorized Access
- PoC2025-08-01misconfigured-concrete5: Misconfigured Concrete5
- PoC2025-08-01syncthing-dashboard: Syncthing Dashboard Exposure
- PoC2025-08-01unauthenticated-glances: Glances Unauthenticated Panel
- PoC2025-08-01announcekit-takeover: Announcekit Takeover Detection
- PoC2025-08-01launchrock-takeover: Launchrock Takeover Detection
- PoC2025-08-01avtech-auth-bypass: AVTECH Video Surveillance Product - Authentication Bypass
- PoC2025-08-01avtech-unauth-file-download: AVTECH Video Surveillance Product - Unauthenticated File Download
- PoC2025-08-01concrete-xss: Concrete CMS <8.5.2 - Cross-Site Scripting
- PoC2025-08-01opencpu-rce: OpenCPU - Remote Code Execution
- PoC2025-08-01acme-xss: Let's Encrypt - Cross-Site Scripting
- PoC2025-08-01blue-ocean-excellence-lfi: Blue Ocean Excellence - Local File Inclusion
- PoC2025-08-01hanming-lfr: Hanming Video Conferencing - Local File Inclusion
- PoC2025-08-01ncast-lfi: Ncast HD Intelligent Recording - Arbitrary File Reading
- PoC2025-08-01opencart-core-sqli: OpenCart Core 4.0.2.3 'search' - SQL Injection
- PoC2025-08-01opencti-lfi: OpenCTI 3.3.1 - Local File Inclusion
- PoC2025-08-01sharp-printers-lfi: Sharp Multifunction Printers - Local File Inclusion
- PoC2025-08-01viewlinc-crlf-injection: viewLinc 5.1.2.367 - Carriage Return Line Feed Attack
- PoC2025-08-01wanhu-teleconferenceservice-xxe: Wanhu OA TeleConferenceService Interface - XML External Entity Injection
- PoC2025-08-01advanced-access-manager-lfi: WordPress Advanced Access Manager < 5.9.9 - Local File Inclusion
- PoC2025-08-01advanced-booking-calendar-sqli: Advanced Booking Calendar < 1.6.2 - SQL Injection
- PoC2025-08-01hide-security-enhancer-lfi: WordPress Hide Security Enhancer 1.3.9.2 Local File Inclusion
- PoC2025-08-01wordpress-wordfence-lfi: WordPress Wordfence 7.4.5 - Local File Inclusion
- PoC2025-08-01wordpress-wordfence-waf-bypass-xss: Wordpress Wordfence - Cross-Site Scripting
- PoC2025-08-01wp-ambience-xss: WordPress Ambience Theme <=1.0 - Cross-Site Scripting
- PoC2025-08-01erp-nc-directory-traversal: ERP-NC - Local File Inclusion
- PoC2025-08-01yonyou-filereceiveservlet-fileupload: Yonyou NC FileReceiveServlet - Aribitrary File Upload
- PoC2025-08-01yonyou-nc-accept-fileupload: YonYou NC Accept Upload - Arbitray File Upload
- PoC2025-08-01yonyou-nc-baseapp-deserialization: Yonyou NC BaseApp UploadServlet - Deserialization Detect
- PoC2025-08-01yonyou-nc-dispatcher-fileupload: Yonyou NC ServiceDispatcher Servlet - Arbitrary File Upload
- PoC2025-08-01yonyou-nc-grouptemplet-fileupload: UFIDA NC Grouptemplet Interface - Unauthenticated File Upload
- PoC2025-08-01yonyou-nc-ncmessageservlet-rce: UFIDA NC NCMessageServlet - Deserialization RCE Detection
- PoC2025-08-01yonyou-ufida-nc-lfi: UFIDA NC Portal - Arbitrary File Read
- PoC2025-08-01rsync-list-modules: Rsync List Modules - Enumeration
- PoC2025-08-01unauth-vnc-server-detect: Unauthenticated VNC Server - Detect
- PoC2025-08-01CVE-2021-3122: NCR Command Center Agent 16.3 - Remote Command Execution
- PoC2025-08-01CVE-2025-2746: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)
- PoC2025-08-01CVE-2025-2747: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)
- PoC2025-08-01CVE-2025-34509: Sitecore Experience Manager (XM) and Experience Platform (XP) - Hardcoded Credentials
- PoC2025-08-01CVE-2025-54253: Adobe Experience Manager Forms - Insecure Deserialization
- PoC2025-08-01aem-dispatcher-bypass: Adobe Experience Manager - Dispatcher Bypass
- PoC2025-08-01yonyou-nc-lfi: UFIDA NC - Arbitrary File Read
- PoC2025-08-01e-cology-syncuserinfo-sqli: 泛微OA e-cology syncuserinfo SQL注入漏洞
- PoC2025-08-01tencent-wechat-agentinfo-disclosure: 腾讯 企业微信 agentinfo 信息泄漏漏洞
- PoC2025-08-01novnc-login-panel: noVNC Login Panel - Detect
- PoC2025-08-01rsyncd-detect: Rsyncd Service - Detect
- PoC2025-08-01sap-fiori-launchpad: SAP Fiori Launchpad Login Panel - Detect
- PoC2025-08-01sap-fiorilaunchpad-logon: Fiori Launchpad Login Panel - Detect
- 2025-07-30用友NC listUserSharingEvents 存在SQL注入漏洞
- 2025-07-30关于NC Portal端MtAppTimeLineAction接口存在SQL注入漏洞修复通告
- 2025-07-28用友NC系统linkVoucher接口SQL注入漏洞
- 2025-07-22用友NC console sql注入漏洞
- 2025-07-22用友NC系统linkVoucher接口SQL注入漏洞
- 2025-07-21用友NC及NC Cloud系统LDAP命令执行漏洞
- 2025-07-21关于用友NC系统存在getFormItem接口SQL注入漏洞修复通告
- 2025-07-18用友 NC /portal/pt/servlet/workflowService/doPost SQL 注入漏洞
- 2025-07-18用友 NC /portal/pt/servlet/workflowService/doPost SQL 注入漏洞
- 2025-07-17用友NC /portal/pt/portaltemplate/importTemplate XML 外部实体注入漏洞
- 2025-07-17用友NC /portal/pt/portaltemplate/importTemplate XML 外部实体注入漏洞
- PoC2025-07-15用友NC IMetaWebService4BqCloud SQL注入漏洞
- 2025-07-14用友NC及NC Cloud系统 Login 任意文件上传与读取漏洞
- 2025-07-09用友NC /portal/pt/servlet/getFormItem/doPost SQL 注入漏洞 （CNVD-2025-06710）
- 2025-07-09用友NC /portal/pt/servlet/getFormItem/doPost SQL 注入漏洞 （CNVD-2025-06710）
- 2025-07-05用友NC deleteEvent存在SQL注入漏洞
- 2025-06-26用友NC uncancelEvent SQL注入漏洞
- 2025-06-26关于NC系统oacoSchedulerEvents接口sql注入漏洞和oacofile接口任意文件读取漏洞的安全通告
- 2025-06-25用友NC /ActivityNotice/export sql注入
- 2025-06-20Kentico Xperience13 /cms/admin 文件读取漏洞 （CVE-2025-0011）
- 2025-06-20Kentico Xperience13 /cms/admin 文件读取漏洞 （CVE-2025-0011）
- 2025-06-19关于NC Cloud系统存在Beanutils远程执行漏洞修复方案通告
- 2025-06-16用友NC changeEvent 存在SQL注入漏洞
- PoC2025-06-12用友NC qrySubPurchaseOrgByParentPk SQL注入漏洞
- 2025-06-12关于NC Cloud authorize 接口存在sql注入漏洞修复方案通告
- 2025-06-10Brilliance Golden Link Secondary System 注入漏洞
- 2025-06-10Brilliance Golden Link Secondary System 注入漏洞
- 2025-06-10Brilliance Golden Link Secondary System 注入漏洞
- 2025-06-07用友NC Cloud系统 IBapIOService存在SQL注入漏洞
- 2025-06-06用友NC loadDoc.ajax 文件读取漏洞
- 2025-05-23用友 NC Cloud /service/~aert/PMCloudDriveProjectStateServlet 命令执行漏洞
- 2025-05-23用友 NC Cloud /service/~aert/PMCloudDriveProjectStateServlet 命令执行漏洞
- 2025-05-05WordPress plugin Advanced Reorder Image Text Slider 跨站请求伪造漏洞
- 2025-04-24关于NC Cloud、YonBIP高级版接收或拒绝offer接口存在SQL注入漏洞修复通告
- 2025-04-24关于NC、NC Cloud、YonBIP高级版存在sql注入以及XML实体注入漏洞的修复通告
- 2025-04-21Ivanti Cloud Services Appliance (CSA) 存在路径遍历漏洞 (CVE-2024-8963)
- 2025-04-21关于联查人员卡片viewPsnCard服务存在SQL注入漏洞修复方案通知
- 2025-04-15Bylancer Quicklancer GET 参数列表 SQL 注入漏洞(CVE-2024-7188)
- 2025-04-11Adobe Experience Manager 跨站脚本漏洞
- 2025-04-09company-financial-management 注入漏洞
- 2025-04-09opencms 路径遍历漏洞
- 2025-04-03关于NC、NC Cloud、YonBIP高级版存在公共入口反序列化Servlet漏洞修复通告
- 2025-04-03Xinference /ui 未授权访问漏洞
- 2025-04-03Xinference /ui 未授权访问漏洞
- 2025-04-01用友 NC /servlet/~baseapp/ncmsgservlet 代码执行漏洞
- 2025-04-01用友 NC /ebvp/expeval/expertschedule;1.jpg SQL 注入漏洞
- 2025-04-01用友 NC /servlet/~baseapp/ncmsgservlet 代码执行漏洞
- 2025-04-01用友 NC /ebvp/expeval/expertschedule;1.jpg SQL 注入漏洞
- 2025-03-28Yonyou UFIDA ERP-NC 代码注入漏洞
- 2025-03-26用友NC pkevalset SQL 注入漏洞
- 2025-03-26Yonyou UFIDA ERP-NC 代码注入漏洞
- 2025-03-26Yonyou UFIDA ERP-NC 代码注入漏洞
- 2025-03-25（CVE-2025-2747）Kentico Xperience认证绕过漏洞
- 2025-03-25（CVE-2025-2746）Kentico Xperience认证绕过漏洞
- 2025-03-21Davinci /druid/submitLogin 默认口令漏洞
- 2025-03-21用友 NC /uapws/service/nc.itf.bap.service.IBapIOService GetBapTable SQL 注入漏洞
- 2025-03-21Davinci /druid/submitLogin 默认口令漏洞
- 2025-03-21用友 NC /uapws/service/nc.itf.bap.service.IBapIOService GetBapTable SQL 注入漏洞
- 2025-03-19Sitecore 反序列化漏洞(CVE-2025-27218)
- 2025-03-15关于NC importTemplate 接口存在XML实体注入漏洞的修复通告
- 2025-03-14用友 NC /portal/pt/PaWfm2/open SQL 注入漏洞
- 2025-03-14用友 NC /servlet/~ic/uap.pub.ae.model.handle.ModelHandleServlet 代码执行漏洞
- 2025-03-14用友 NC /portal/pt/PaWfm2/open SQL 注入漏洞
- 2025-03-14用友 NC /servlet/~ic/uap.pub.ae.model.handle.ModelHandleServlet 代码执行漏洞
- 2025-03-08Cisco TelePresence Management Suite 跨站脚本漏洞
- 2025-03-07metaCRM commonCheckServ XXE漏洞
- PoC2025-03-07用友 NC /servlet/~ufoe/jiuqisingleservlet 代码执行漏洞
- 2025-03-07用友 NC /servlet/~ufoe/jiuqisingleservlet 代码执行漏洞
- 2025-02-27关于用友NC6.5 portal rmwebImage download接口存在SQL注入漏洞的安全通告
- 2025-02-20Sitecore Experience Manager和Experience Platform 安全漏洞
- 2025-02-19WordPress plugin Qubely – Advanced Gutenberg Blocks 跨站脚本漏洞
- 2025-02-18关于NC系统工作桌面状态查询存在SQL注入漏洞的安全通告
- 2025-02-09SiberianCMS 代码注入漏洞
- PoC2025-02-08用友NC /service/~webrt/nc.uap.lfw.file.action.DocServlet 文件读取漏洞
- 2025-02-08WordPress Fancy Product Designer 插件 /wp-admin/admin-ajax.php SQL 注入漏洞（CVE-2024-51818）
- 2025-02-08用友NC /service/~webrt/nc.uap.lfw.file.action.DocServlet 文件读取漏洞
- 2025-02-08WordPress Fancy Product Designer 插件 /wp-admin/admin-ajax.php SQL 注入漏洞（CVE-2024-51818）
- 2025-02-07Adobe Experience Manager 跨站脚本漏洞
- 2025-02-07Adobe Experience Manager 跨站脚本漏洞
- 2025-02-07Adobe Experience Manager 跨站脚本漏洞
- 2025-02-07Adobe Experience Manager 跨站脚本漏洞
- 2025-02-07Adobe Experience Manager 跨站脚本漏洞
- 2025-02-05Cisco AsyncOS输入验证错误漏洞（CNVD-2025-03529）
- 2025-01-25IBM Tivoli Application Dependency Discovery Manager 跨站脚本漏洞
- 2025-01-18IBM CICS TX Advanced 跨站脚本漏洞
- 2025-01-17Rsync 缓冲区溢出漏洞
- 2025-01-17WordPress plugin Navigation Du Lapin Blanc 跨站脚本漏洞
- 2025-01-17关于NC系统view接口的sql注入漏洞的安全通告
- 2025-01-17关于NC系统rmImage接口的sql注入漏洞的安全通告
- 2025-01-17关于NC系统imageupload接口的sql注入漏洞的安全通告
- 2025-01-16Rsync 信息泄露漏洞
- 2025-01-16Ivanti Avalanche 路径遍历漏洞
- 2025-01-10用友NC /portal/pt/cartabletimeline/doList SQL 注入漏洞
- 2025-01-10用友NC /portal/pt/cartabletimeline/doList SQL 注入漏洞
- PoC2025-01-08用友NC /portal/pt/office/checkekey 接口存在 SQL 注入漏洞
- 2024-12-31关于NC Cloud系统的mob接口tenantId参数sql注入漏洞的安全通告
- 2024-12-311000 Projects Attendance Tracking Management System 注入漏洞
- 2024-12-26关于NC系统getMdPropertyJson接口的sql注入漏洞的安全通告
- 2024-12-25关于NC及NC Cloud系统queryworkbench接口的SQL注入漏洞的安全通告
- 2024-12-25关于NC及NC Cloud系统MaLoginAction接口的SQL注入漏洞的安全通告
- 2024-12-20用友NC-Cloud /ncchr/attendstaff/getStaffInfo SQL 注入漏洞
- 2024-12-20关于NC系统portalpage接口的sql注入漏洞的安全通告
- 2024-12-20用友NC-Cloud /ncchr/attendstaff/getStaffInfo SQL 注入漏洞
- 2024-12-19用友NC yerfiledown SQL注入漏洞
- 2024-12-17DCOM-CNS-NCS 远程命令执行漏洞
- 2024-12-16关于NC系统SSOQueryServiceImpl的sql注入漏洞的安全通告
- 2024-12-16关于NC系统的拒绝服务漏洞的安全通告
- 2024-12-13用友NC /portal/pt/yerfile/down/bill SQL 注入漏洞
- PoC2024-12-13用友NC-warningDetailInfo接口存在SQL注入漏洞
- 2024-12-13关于NC系统cartabletimeline接口的sql注入漏洞的安全通告
- 2024-12-13关于NC系统redirect接口的sql注入漏洞的安全通告
- 2024-12-13用友NC /portal/pt/yerfile/down/bill SQL 注入漏洞
- 2024-12-06用友 NC /nc.itf.bd.crm.ICorpExportToCrmService 文件读取漏洞
- 2024-12-06用友 NC /nc.itf.bd.crm.IInvclExportToCrmService 文件读取漏洞
- 2024-12-06用友 NC /nc.itf.bd.crm.IAreaclExportToCrmService 文件读取漏洞
- 2024-12-06用友 NC /nc.itf.bd.crm.ICorpExportToCrmService 文件读取漏洞
- 2024-12-06用友 NC /nc.itf.bd.crm.IInvclExportToCrmService 文件读取漏洞
- 2024-12-06用友 NC /nc.itf.bd.crm.IAreaclExportToCrmService 文件读取漏洞
- 2024-11-29用友NC /portal/pt/task/process SQL 注入漏洞
- 2024-11-29用友 NC /nc.itf.smart.ISmartQueryWebService 文件读取漏洞
- 2024-11-29用友 NC /nc.itf.tb.oba.INtbOBAWebService 文件读取漏洞
- 2024-11-29用友 NC /nc.itf.tb.oba.IOBAMasterNodeWebService 文件读取漏洞
- 2024-11-29用友 NC /nc.pubitf.rbac.IUserPubServiceWS 文件读取漏洞
- 2024-11-29用友NC /portal/pt/task/process SQL 注入漏洞
- 2024-11-29用友 NC /nc.itf.smart.ISmartQueryWebService 文件读取漏洞
- 2024-11-29用友 NC /nc.itf.tb.oba.INtbOBAWebService 文件读取漏洞
- 2024-11-29用友 NC /nc.itf.tb.oba.IOBAMasterNodeWebService 文件读取漏洞
- 2024-11-29用友 NC /nc.pubitf.rbac.IUserPubServiceWS 文件读取漏洞
- 2024-11-28用友NC Cloud /portal/pt/file/upload 任意文件上传漏洞
- 2024-11-27关于NC系统流程任务查询task的sql注入漏洞漏洞的安全通告
- 2024-11-21用友NC-Cloud process存在SQL注入漏洞
- 2024-11-21用友NC Cloud /ncchr/period/queryBeginEndTime SQL 注入漏洞
- 2024-11-21用友 NC /nc.itf.bap.service.IBapIOService 文件读取漏洞
- 2024-11-21用友 NC /nc.itf.ses.DataPowerService 文件读取漏洞
- 2024-11-21用友 NC /nc.itf.tb.outlineversion.TbbOutlineUpateVersionService 文件读取漏洞
- 2024-11-21用友NC Cloud /ncchr/period/queryBeginEndTime SQL 注入漏洞
- 2024-11-21用友 NC /nc.itf.bap.service.IBapIOService 文件读取漏洞
- 2024-11-21用友 NC /nc.itf.ses.DataPowerService 文件读取漏洞
- 2024-11-21用友 NC /nc.itf.tb.outlineversion.TbbOutlineUpateVersionService 文件读取漏洞
- 2024-11-20用友网络 用友NC 经销商门户ecp 敏感信息泄露漏洞
- 2024-11-19关于NC系统getAuth的sql注入漏洞的安全通告
- 2024-11-19关于NC系统经销商门户信息泄露漏洞的安全通告
- 2024-11-15用友NC /runStateServlet/doPost SQL 注入漏洞
- 2024-11-15关于NC及NC Cloud系统的MonitorServlet反序列化漏洞的安全通告
- 2024-11-15用友NC /runStateServlet/doPost SQL 注入漏洞
- 2024-11-12Siemens多款产品 注入漏洞 CVE-2024-50572
- 2024-11-12(CVE-2023-32736) 西门子 SIMATIC S7-PLCSIM、STEP 7 Safety、STEP 7、WinCC Unified、WinCC 权限提升漏洞
- 2024-11-09Adobe Experience Manager 跨站脚本漏洞
- 2024-11-09Adobe Experience Manager 跨站脚本漏洞
- 2024-11-06用友网络 NC Cloud CA 文件上传限制不当漏洞
- 2024-11-05用友网络 NC Cloud系统 FS 访问控制不当漏洞
- 2024-11-05用友网络 NC系统 saveImageServlet/saveXmlToFIleServlet 文件上传限制不当漏洞
- 2024-11-05用友网络 NC系统 LfwFileQryServiceImpl SQL注入漏洞
- 2024-11-05关于NC系统saveImageServlet接口和saveXmlToFIleServlet接口的任意文件上传漏洞的安全通告
- 2024-11-04关于NC Cloud系统FS未授权访问漏洞的安全通告
- 2024-11-02Beckhoff TwinCAT 操作系统命令注入漏洞
- 2024-11-02WordPress plugin WP Simple Anchors Links 跨站脚本漏洞
- 2024-11-01用友NC-Cloud /nccloud/mob/pfxx/manualload/importhttpscer 文件上传漏洞
- 2024-11-01关于NC系统LfwFileQryServiceImpl的sql注入漏洞的安全通告
- 2024-11-01关于NC系统deleteOftenMenu的sql注入漏洞的安全通告
- 2024-11-01关于NC系统redeploy的sql注入漏洞的安全通告
- 2024-11-01用友NC-Cloud /nccloud/mob/pfxx/manualload/importhttpscer 文件上传漏洞
- 2024-10-29Attendance and Payroll System SQL注入漏洞
- 2024-10-29Attendance and Payroll System SQL注入漏洞
- 2024-10-25用友NC /portal/docctr/open/word.docx 文件读取漏洞
- 2024-10-25用友NC /portal/docctr/open/word.docx 文件读取漏洞
- 2024-10-24关于NC Cloud系统的CA任意文件上传漏洞的安全通告
- 2024-10-24关于NC Cloud系统的OpenAPI接口sql注入漏洞的安全通告
- 2024-10-23Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞
- 2024-10-12用友NC系统 /portal/pt/file/upload 文件上传漏洞
- 2024-10-12用友NC系统 /portal/pt/file/upload 文件上传漏洞
- 2024-10-09用友 NC nc.document.pub.fileSystem.servlet.DeleteServlet存在远程命令执行漏洞
- 2024-09-30用友NC ExportErrorAction 文件读取漏洞
- 2024-09-30用友NC ExportErrorAction 文件读取漏洞
- 2024-09-27Microchip Technology SyncServer ping.php 命令执行漏洞
- 2024-09-27AtlassianConfluence preview 文件读取漏洞（CVE-2019-3394）
- 2024-09-27用友 NC Cloud /ebvp/other/qryAddGoodsApplyPK;.js SQL注入漏洞
- 2024-09-27Microchip Technology SyncServer ping.php 命令执行漏洞
- 2024-09-27AtlassianConfluence preview 文件读取漏洞（CVE-2019-3394）
- 2024-09-27用友 NC Cloud /ebvp/other/qryAddGoodsApplyPK;.js SQL注入漏洞
- 2024-09-26VNC 未授权访问漏洞
- 2024-09-26关于NC系统importExcelTemplate接口的任意文件上传漏洞的安全通告
- 2024-09-23Ivanti Cloud Service Appliance 未授权 路径遍历漏洞
- 2024-09-21Ivanti Cloud Service Appliance 路径穿越漏洞
- PoC2024-09-19关于NC及NC Cloud系统的IMetaWebService4BqCloud XXE的SQL注入漏洞的安全通告
- 2024-09-14用友NC portalsesInittoolservice 信息泄漏漏洞
- 2024-09-14用友NC queryRuleByDeptId SQL注入漏洞
- 2024-09-14Ivanti Cloud Services Appliance 需授权 命令注入漏洞
- 2024-09-14用友NC portalsesInittoolservice 信息泄漏漏洞
- 2024-09-14用友NC queryRuleByDeptId SQL注入漏洞
- 2024-09-12关于NC系统saveProDefServlet接口的sql注入漏洞的安全通告
- 2024-09-12关于NC系统workflowImageServlet和importPml接口的sql注入漏洞的安全通告
- 2024-09-12关于NC系统PaWfm的sql注入漏洞的安全通告
- 2024-09-05用友NC&NC Cloud系统 TbbOutlineUpateVersionService 接口SQL注入漏洞
- 2024-09-04用友NC /download 文件读取漏洞
- 2024-09-04关于NC及NC Cloud系统的TbbOutlineUpateVersionService接口sql注入漏洞的安全通告
- 2024-09-04用友NC /download 文件读取漏洞
- 2024-09-03用友NC Cloud /mp/loginxietong 权限绕过漏洞
- 2024-09-03关于NC及NC Cloud系统的wsncapplet.jsp信息泄漏漏洞的安全通告
- 2024-09-03关于NC及NC Cloud系统的IResourceManager文件上传漏洞的安全通告
- 2024-09-03关于NC及NC Cloud系统的fastjson漏洞的安全通告
- 2024-09-02用友NC-Cloud系统show_download_content存在SQL注入漏洞
- 2024-08-30关于NC系统ActivityNotice接口的sql注入漏洞的安全通告
- 2024-08-28关于NC及NC Cloud系统的INtbOBAWebService未授权访问漏洞的安全通告
- 2024-08-19智联云采 SRM2.0 runtimeLog download 任意文件读取漏洞
- 2024-08-17用友NC psnImage SQL注入漏洞
- 2024-08-16用友 NC FileManager 任意文件上传漏洞
- 2024-08-16万户OA TeleConferenceService XXE漏洞
- 2024-08-15用友NC download 文件读取漏洞
- 2024-08-15用友NC download 文件读取漏洞
- 2024-08-14Ivanti Avalanche SecureFilter 认证绕过漏洞
- 2024-08-14用友 NC accept.jsp 任意文件上传漏洞(攻击成功)
- 2024-08-14用友NC-FileManager-任意文件上传漏洞
- 2024-08-13万户OA TeleConferenceService XXE漏洞
- 2024-08-12用友NC complainjudge SQL注入漏洞
- 2024-08-12用友NC /portal/pt/link/content pk_funnode SQL注入漏洞
- 2024-08-10用友NC系统接口 link SQL注入漏洞
- 2024-08-08万户OA-graph_include-SQL注入漏洞
- 2024-08-07Bylancer Quicklancer CVE-2024-7188 SQL注入漏洞
- 2024-08-07关于NC Cloud系统mob接口未授权访问漏洞的安全通告
- 2024-08-06用友NC-Cloud queryStaffByName SQL 注入漏洞
- 2024-08-06用友NC-Cloud queryStaffByName SQL 注入漏洞
- 2024-08-05天擎 rptsvcsyncpoint 未授权访问漏洞
- 2024-08-03用友 NC-cloud queryPsnInfo SQL注入漏洞
- 2024-08-03用友 NC-cloud QueryStaffByName SQL注入漏洞
- 2024-08-03用友 NC complainbilldetail SQL注入漏洞
- 2024-08-02Spring Cloud Function SPEL functionRouter 接口远程命令执行漏洞（CVE-2022-22963）
- 2024-08-02用友NC Cloud /service/sprmonitorservlet 未授权反序列化漏洞
- 2024-08-02用友NC Cloud /service/sprmonitorservlet 未授权反序列化漏洞
- 2024-08-02Spring Cloud Function SPEL functionRouter 接口远程命令执行漏洞（CVE-2022-22963）
- 2024-08-01用友NC-Cloud系统-queryStaffByName-SQL注入漏洞
- 2024-08-01用友NC-Cloud系统-queryPsnInfo-SQL注入漏洞
- 2024-07-30用友NC complainjudge SQL注入漏洞
- 2024-07-30关于NC系统getOtherData接口的sql注入漏洞的安全通告
- 2024-07-30关于NC系统content的pk_funnode参数存在SQL注入漏洞的安全通告
- 2024-07-29关于NC系统电采complainjudge接口的sql注入漏洞的安全通告
- 2024-07-26关于NC系统doSingUp接口的sql注入漏洞的安全通告
- 2024-07-25用友NC querygoodsgridbycode SQL注入漏洞
- 2024-07-25用友NC Cloud sprmonitorservlet 反序列化漏洞
- 2024-07-25用友NC Cloud datacollectservlet 反序列化漏洞
- 2024-07-25关于NC及NC Cloud系统的反序列化漏洞的安全通告
- 2024-07-25Atlassian Confluence setup-restore 认证绕过漏洞
- 2024-07-25用友NC saveImageServlet 任意文件上传漏洞
- 2024-07-25应用漏洞扫描 - Tencent_Security
- 2024-07-25用友NC cloud runScript SQL注入漏洞
- 2024-07-25ConnectWise ScreenConnect CVE-2024-1709身份验证绕过漏洞
- 2024-07-25用友NC Avatar 任意文件上传漏洞
- 2024-07-25Ncast盈可视高清智能录播系统 CVE-2024-0305 远程命令注入漏洞
- 2024-07-25Atlassian Confluence setup-restore 认证绕过漏洞
- 2024-07-25用友NC querygoodsgridbycode SQL注入漏洞
- 2024-07-24用友 NCCloud /service/sprmonitorservlet 存在反序列化代码执行漏洞
- 2024-07-24用友NC querygoodsgridbycode SQL注入漏洞
- 2024-07-23用友NC系统存在SQL注入漏洞
- 2024-07-23用友NC querygoodsgridbycode SQL注入漏洞
- 2024-07-19OwnCloud GetPhpInfo.php 信息泄露漏洞（CVE-2023-49103）
- 2024-07-19用友NC Cloud /fs/;/console 权限绕过漏洞
- 2024-07-19OwnCloud GetPhpInfo.php 信息泄露漏洞（CVE-2023-49103）
- 2024-07-19用友NC Cloud /fs/;/console 权限绕过漏洞
- 2024-07-18关于NC系统blobRefClassSearch接口中pk_org参数的sql注入漏洞的安全通告
- 2024-07-18用友NC JiuQiClientReqDispatch 远程代码执行漏洞
- 2024-07-18Opencart Divido CVE-2024-21514 SQL注入漏洞
- 2024-07-18用友NC CLOUD smartweb2.RPC.d XML外部实体注入漏洞
- PoC2024-07-18用友NC IMsgCenterWebService命令注入漏洞
- 2024-07-18用友 NC oacoSchedulerEvents SQL注入漏洞
- 2024-07-17用友NCCloud未授权任意代码执行RCE
- 2024-07-17王道4S管理系统PeiJianFuncWebService存在SQL注入漏洞
- 2024-07-17iSyncPlant移动管理系统反序列化漏洞
- 2024-07-16用友 NC Cloud blobRefClassSearch Fastjson反序列化漏洞
- 2024-07-13用友NC-Cloud blobRefClassSearch 不安全的反序列化漏洞
- 2024-07-12用友NC-Cloud blobRefClassSearch接口存在反序列化漏洞
- 2024-07-12ownCloud CVE-2023-49105 鉴权绕过漏洞
- 2024-07-10关于NC及NC Cloud系统的uapws接口XXE漏洞的安全通告
- 2024-07-05用友 NC Cloud queryPsnInfo接口 SQL注入漏洞
- 2024-06-21Atlassian Confluence Server PackageResourceManager信息泄露漏洞
- 2024-06-21Atlassian Confluence Server 信息泄露漏洞
- 2024-06-21Atlassian Confluence Data Center and Server CVE-2024-21683 远程代码执行漏洞
- 2024-06-20Rancher Kubernetes Engine 敏感信息存储不当
- 2024-06-20用友NC 电采warningDetailInfo SQL注入漏洞
- PoC2024-06-14用友NC-oacoSchedulerEvents接口存在sql注入漏洞
- 2024-06-14用友NC /mp/initcfg/../uploadControl/uploadFile 文件上传漏洞
- 2024-06-14用友NC downCourseWare 任意文件下载漏洞
- 2024-06-14用友NC /mp/initcfg/../uploadControl/uploadFile 文件上传漏洞
- 2024-06-13用友NC linkVoucher SQL注入漏洞
- 2024-06-12 用友-UFIDA-NC /portal/pt/oacoSchedulerEvents/isAgentLimit SQL 注入漏洞
- 2024-06-12 用友-UFIDA-NC /portal/pt/oacoSchedulerEvents/isAgentLimit SQL 注入漏洞
- 2024-06-07用友NC /portal/pt/PaWfm/open 文件 proDefPk 参数 SQL 注入漏洞
- 2024-06-07用友NC /portal/pt/PaWfm/open 文件 proDefPk 参数 SQL 注入漏洞
- 2024-06-06用友NC pagesServlet SQL注入漏洞
- 2024-06-06用友NC downCourseWare 任意文件下载漏洞
- 2024-06-06用友NC smartweb2.loadConst.d 任意文件读取漏洞
- 2024-06-05用友NC 文件读取漏洞
- 2024-05-31用友-UFIDA-NC /portal/pt/servlet/saveImageServlet/doPost 文件上传漏洞
- 2024-05-31用友 NC /portal/pt/yercommon/linkVoucher SQL 注入漏洞
- 2024-05-31用友NC showcontent SQL注入漏洞
- 2024-05-31用友nc IPsndocExportToCrmService 任意文件读取漏洞
- 2024-05-31用友NC warningDetailInfo SQL注入漏洞
- 2024-05-31Atlassian Confluence CVE-2023-22527 远程命令执行漏洞
- 2024-05-31用友NC saveXmlToFileServlet 任意文件上传漏洞
- 2024-05-31OwnCloud Graphapi GetPhpInfo.php 信息泄露漏洞
- 2024-05-31用友NC registerServlet JNDI远程代码执行漏洞
- 2024-05-31用友 NC printBill接口 任意文件读取漏洞
- 2024-05-31用友NC complainbilldetail接口 SQL注入漏洞
- 2024-05-31用友-UFIDA-NC /portal/pt/servlet/saveImageServlet/doPost 文件上传漏洞
- 2024-05-31用友 NC /portal/pt/yercommon/linkVoucher SQL 注入漏洞
- 2024-05-28用友NC 电子采购信息系统 securitycheck SQL注入漏洞
- 2024-05-24用友NC-Cloud /ncchr/attendScript/internal/runScript SQL 注入漏洞
- 2024-05-24用友NC /portal/file 文件读取漏洞
- 2024-05-24用友NC-Cloud /ncchr/attendScript/internal/runScript SQL 注入漏洞
- 2024-05-24用友NC /portal/file 文件读取漏洞
- 2024-05-23Atlassian Confluence 需授权 安全缺陷漏洞 可导致远程代码执行
- 2024-05-23用友NC PaWfm接口 SQL注入漏洞
- 2024-05-23用友NC runStateServlet SQL注入漏洞
- 2024-05-22用友NC系统 down/bill接口 SQL注入漏洞
- 2024-05-20Triton Inference Server 远程代码执行漏洞
- 2024-05-17用友NC downTax 存在SQL注入漏洞
- 2024-05-17用友 NC /portal/pt/erfile/down/bill SQL 注入漏洞
- 2024-05-17用友NC printBill 任意文件读取漏洞
- 2024-05-17用友 NC /portal/pt/erfile/down/bill SQL 注入漏洞
- 2024-05-15用友 NC Cloud ufoe模块接口 任意文件上传漏洞
- 2024-05-15用友 NC ufoe模块接口 任意文件上传漏洞
- 2024-05-15用友 NC Cloud mob xstream 远程代码执行漏洞
- 2024-05-14用友NC printBill 存在任意文件读取漏洞
- 2024-05-11用友NC registerServlet JNDI 远程代码执行漏洞
- 2024-05-09用友NC bill接口SQL注入漏洞
- 2024-05-09用友 NC /hrss/dorado XML实体注入漏洞
- 2024-05-07用友NC workflowService接口 SQL注入漏洞
- 2024-05-06Weblogic Coherence 反序列化漏洞 （CVE-2020-14644）
- 2024-05-06用友 NC Cloud importhttpscer接口 任意文件上传漏洞
- 2024-05-06用友 NC PaWfm2 SQL注入漏洞
- 2024-05-03Ncast盈可视 高清智能录播系统 downloadLog.php 存在任意文件读取漏洞
- 2024-05-01用友NC down/bill 存在 SQL 注入漏洞
- 2024-04-29用友NC及NC Cloud系统 lfw接口 任意文件上传漏洞
- 2024-04-29用友 NC PaWfm SQL注入漏洞
- 2024-04-29用友NC及NC Cloud系统 lfw接口 JNDI注入漏洞
- 2024-04-29用友NC runStateServlet SQL注入漏洞
- 2024-04-28用友 NC OAUserAuthenticationServlet 反序列化漏洞
- 2024-04-28用友 NC UserQueryServiceServlet 反序列化漏洞
- 2024-04-28用友 NC OAUserQryServlet 反序列化漏洞
- PoC2024-04-28用友 NC UserSynchronizationServlet 反序列化漏洞
- 2024-04-28用友 NC UserAuthenticationServlet 反序列化漏洞
- 2024-04-28用友NC saveImageServlet接口 任意文件上传漏洞
- 2024-04-28用友 NC OAContactsFuzzySearchServlet 反序列化漏洞
- PoC2024-04-28用友NC importPml SQL注入漏洞
- 2024-04-28用友UFIDA NC show_download_content接口 SQL注入漏洞
- 2024-04-26Weblogic Coherence 反序列化漏洞 （CVE-2020-2884）
- 2024-04-26Vinchin Backup and Recovery CVE-2024-25228 命令注入漏洞
- 2024-04-26用友NC workflowImageServlet SQL注入漏洞
- 2024-04-25用友 NC actionhandlerservlet 反序列化漏洞复现
- 2024-04-25用友NC nc.bs.pub.im.ContactsQueryServiceServlet 反序列化
- 2024-04-25用友NC com.ufida.eip.adaptor.servlet.ServletForESBAdaptor 反序列化漏洞
- 2024-04-23华为 FusionCompute 存在 Log2j 远程命令执行漏洞
- 2024-04-23用友NCCloud 存在远程命令执行漏洞
- 2024-04-23用友NCCloud 存在远程命令执行漏洞
- 2024-04-23用友NCCloud 存在远程命令执行漏洞
- 2024-04-23用友NC 存在远程命令执行漏洞
- 2024-04-23用友NCCloud 存在远程命令执行漏洞
- 2024-04-23用友NC 存在远程命令执行漏洞
- 2024-04-23用友NC 存在远程命令执行漏洞
- 2024-04-23用友NCCloud 存在远程命令执行漏洞
- 2024-04-23用友NC 存在远程命令执行漏洞
- 2024-04-23用友NC 存在远程命令执行漏洞
- 2024-04-23用友NCCloud 存在远程命令执行漏洞
- 2024-04-23用友NCCloud 存在任意文件上传漏洞
- 2024-04-23用友NCCloud 存在XML实体注入漏洞
- 2024-04-23用友NCCloud 存在敏感信息泄露漏洞
- 2024-04-23用友NCCloud 存在远程命令执行漏洞
- 2024-04-23用友NCCloud 存在SQL注入漏洞
- 2024-04-23用友NCCloud 存在任意文件上传漏洞
- 2024-04-23用友NC 存在任意文件下载漏洞
- 2024-04-23用友NC 存在任意文件读取漏洞
- 2024-04-23用友NC 存在任意文件读取漏洞
- 2024-04-23用友NC /service/monitorservlet 路径存在反序列化漏洞
- 2024-04-23用友NCCloud /manualload/importhttpscer 路径存在任意文件上传漏洞
- 2024-04-23用友NCCloud 存在任意文件上传漏洞
- 2024-04-23用友NC 存在SQL注入漏洞
- 2024-04-23用友NC 存在SQL注入漏洞
- 2024-04-23用友NC 存在SQL注入漏洞
- 2024-04-23用友NC queryByWhere 接口存在SQL注入漏洞
- 2024-04-23用友NC queryInvcl 接口存在SQL注入漏洞
- 2024-04-23用友NCCloud 存在SQL注入漏洞
- 2024-04-23用友NCCloud 存在SQL注入漏洞
- 2024-04-23用友NC queryMaxlev 接口存在SQL注入漏洞
- 2024-04-23用友NC 存在远程命令执行漏洞
- 2024-04-23用友NC /servlet/OAUserQryServlet 接口存在反序列化漏洞
- 2024-04-23用友NCCloud 存在XML实体注入漏洞
- 2024-04-23用友NC /upload/grouptemplet 存在敏感信息泄露
- 2024-04-23用友NC SESInitToolService 接口存在敏感信息泄露
- 2024-04-23用友NC /session.jsp 路径存在敏感信息泄露
- 2024-04-23用友NC /epp/core/eppquickdesk/eppnotice/notice.jsp 路径 pk_infotype 参数存在SQL注入漏洞
- 2024-04-23用友NC ServletForESBAdaptor 接口存在反序列化漏洞
- 2024-04-23用友NC /fs/update/DownloadServlet 接口存在反序列化漏洞
- 2024-04-23用友NC ModelHandleServlet 接口存在反序列化漏洞
- PoC2024-04-23用友NC /servlet/ContactsQueryServiceServlet 接口存在反序列化漏洞
- 2024-04-23用友NC /servlet/ContactsFuzzySearchServlet 接口存在反序列化漏洞
- PoC2024-04-23用友NC /portal/pt/PaWfm/open 路径 proDefPk 参数存在SQL注入漏洞
- 2024-04-23用友NC /hrss/rm/PositionDetail.jsp 路径存在SQL注入漏洞
- 2024-04-23用友NC /cooperate/traceNodes.jsp 路径 model_GUID 参数存在SQL注入漏洞
- 2024-04-23用友NC /epp/detail/publishinfodetail.jsp 路径 pk_message 参数存在SQL注入漏洞
- 2024-04-18CData Sync CVE-2024-31851 路径遍历漏洞
- 2024-04-17西软云 getresponseasync 存在 XML 实体注入漏洞
- 2024-04-17用友NC FileUploadServlet 接口存在反序列化漏洞
- 2024-04-17用友 NC Cloud /fs/service/default/files/ 反序列化漏洞
- 2024-04-17用友 NC /portal/ptt/album/edit接口 delDir参数 SQL注入漏洞
- 2024-04-17用友 NC Cloud queryStaffByName参数 SQL注入漏洞
- 2024-04-17用友 NC /portal/ptt/admin/showlayout接口 delete参数 SQL注入漏洞
- 2024-04-17用友 NC /portal/fm/forum/main_action接口 showTopic参数 SQL注入漏洞
- 2024-04-17用友 NC /portal/fm/forum/main_action接口 listTopics参数 SQL注入漏洞
- 2024-04-17用友 NC Cloud getDataSet参数 SQL注入漏洞
- 2024-04-17用友 NC Cloud getSmartDefFieldsByCode参数 SQL注入漏洞
- 2024-04-17用友 NC Cloud getDataSetByCode参数 SQL注入漏洞
- 2024-04-15用友NC-反序列化漏洞
- 2024-04-14IBM UrbanCode Deploy 日志信息泄露漏洞
- 2024-04-11用友NC saveImageServlet 文件上传漏洞
- 2024-04-11用友NC6.5 runStateServlet SQL注入
- 2024-04-10用友NC Cloud IServiceEntry接口存在任意文件上传
- 2024-04-10用友NC-PaWfm存在sql注入漏洞
- 2024-04-10用友NC /saveXmlToFileServlet/doPost 接口存在任意文件上传漏洞
- 2024-04-09用友NCV65 importPml 前台sql注入
- 2024-04-09yonyouNC 任意命令执行
- 2024-04-09用友NC FormulaViewAction 接口存在SQL注入漏洞
- 2024-04-08用友NCCloud 管理端存在弱口令漏洞
- 2024-04-05用友NC Cloud importhttpscer 任意文件上传漏洞
- 2024-04-03用友NC saveXmlToFIleServlet 任意文件上传漏洞
- 2024-04-03用友NC nc.itf.bd.crm.IPsndocExportToCrmService 接口存在SSRF
- 2024-04-03SolarWinds Network Performance Monitor DeserializeFromStrippedXml 不安全的反序列化漏洞
- 2024-04-03Ivanti Avalanche FileStoreConfig CVE-2023-46264 任意文件上传漏洞
- 2024-04-02用友NC /workflowImageServlet/doPost 接口存在SQL注入漏洞
- 2024-03-31TP-LINK NCXXX 身份验证绕过漏洞
- 2024-03-28用友NC /testper.jsp & /testperformance.jsp 路径存在远程命令执行漏洞
- 2024-03-27用友NC IObaWordService 接口存在XML实体注入
- 2024-03-21用友 NC chart接口存在xxe漏洞
- 2024-03-21Confluence Data Center 与 Confluence Server 路径遍历漏洞
- 2024-03-21Ivanti Avalanche WLAvalancheService CVE-2023-46216 堆栈缓冲区溢出漏洞
- 2024-03-21Delta Industrial Automation CNCSoft ScreenEditor DPB wTextLen栈缓冲区溢出漏洞
- 2024-03-21Ivanti Avalanche WLAvalancheService CVE-2023-46217 堆栈缓冲区溢出漏洞
- 2024-03-20用友NC IBapIOService 接口存在XXE漏洞
- 2024-03-20用友UFIDA NC系统marmot.rpc.d接口存在XML实体注入漏洞
- 2024-03-20用友NCCloud /runScript 路径存在SQL注入漏洞
- 2024-03-19用友NC-Cloud runscript 存在SQL注入漏洞
- 2024-03-18海康威视 NCG 联网网关 $DATA 文件读取漏洞
- 2024-03-18用友NCCloud /ExportErrorAction 路径存在任意文件读取
- 2024-03-15用友NC IUserPubServiceWS 接口存在XML实体注入
- 2024-03-15用友NC DataPowerService 接口存在XML实体注入
- 2024-03-15用友NC IPsndocExportToCrmService 存在XML实体注入
- 2024-03-15用友NC IAreaclExportToCrmService 接口存在XML实体注入
- 2024-03-15用友NC IOBAMasterNodeWebService 接口存在XML实体注入
- 2024-03-15用友NC ISmartQueryWebService 接口存在XML实体注入
- 2024-03-15用友NC PortalSESInitToolService 接口存在XML实体注入
- 2024-03-15用友NC ICurrtypeExportToCrmService 接口存在XML实体注入
- 2024-03-15用友NC ICorpExportToCrmService 接口存在XML实体注入
- 2024-03-15用友NC IInvbasdocExportToCrmService 接口存在XML实体注入
- 2024-03-15用友NC ICustomerImportToNcService 接口存在XML实体注入
- 2024-03-15用友NC IInvclExportToCrmService 接口存在XML实体注入漏洞
- 2024-03-15用友NC IImageInterfaceService 接口存在XML实体注入
- 2024-03-15用友NC TbbOutlineUpateVersionService 接口存在XML实体注入
- 2024-03-14Delta Electronics CNCSoft ScreenEditor 文件预览堆栈缓冲区溢出漏洞
- 2024-03-14Ivanti Avalanche WLAvalancheService CVE-2023-41727 堆栈缓冲区溢出漏洞
- 2024-03-14Ivanti Avalanche SmartDeviceServer decodeToMap XML外部实体注入漏洞
- 2024-03-14用友NC不安全的反序列化漏洞
- 2024-03-11Agencia NUBA CMS存在sql注入
- 2024-03-11用友NC Cloud /service/~aert/PMCloudDriveProjectStateServlet JNDI注入漏洞
- 2024-03-11（CVE-2024-1441）libvirt udevListInterfacesByStatus函数越界写入漏洞
- 2024-03-07Ivanti Avalanche CVE-2023-46263 任意文件上传漏洞
- 2024-03-07用友NC远程代码执行漏洞
- 2024-03-07用友NC远程代码执行漏洞
- 2024-03-07用友NC信息泄露漏洞
- 2024-03-07用友NC /upload/avatar 路径存在任意文件上传漏洞
- 2024-03-06用友NC IObaExcelService 接口存在XML实体注入漏洞
- 2024-03-06用友NC /qryAddGoodsApplyPK 路径存在SQL注入漏洞
- 2024-03-05用友NC IServiceEntryPoint 接口存在XML实体注入漏洞
- 2024-03-05用友NC IServiceEntry 接口存在XML实体注入
- 2024-03-01用友NC resourcemanagerservlet 反序列化rce漏洞
- 2024-02-29用友NC PrintTemplateFileServlet 任意文件读取漏洞
- 2024-02-29ConnectWise ScreenConnect CVE-2024-1708 目录遍历漏洞
- 2024-02-29ConnectWise ScreenConnect CVE-2024-1708 目录遍历漏洞 （访问恶意文件）
- 2024-02-28OpenCms XML外部实体注入(CVE-2023-42344)
- 2024-02-28用友NC nc-itf-tb-oba存在SSRF漏洞
- 2024-02-28OpenCart So Newsletter Custom Popup 4.0 模块 email 参数 SQL 注入漏洞
- 2024-02-27用友NC DataPowerService接口存在任意文件读取
- 2024-02-23用友NC-Cloud IUpdateService xml外部实体注入漏洞
- 2024-02-22YoudianCMS 7.0任意文件上传
- 2024-02-22用友NC Cloud soapFormat.ajax接口XXE漏洞
- 2024-02-22Weblogic ForeignOpaqueReference 远程代码执行漏洞（CVE-2024-20931）
- 2024-02-22ConnectWise ScreenConnect 身份验证绕过漏洞（CVE-2024-1709）
- 2024-02-22TightVNC vncviewer CVE-2022-23967 缓冲区溢出漏洞
- 2024-02-22Abode Systems Inc. iota 命令注入漏洞
- 2024-02-22Ivanti Avalanche CVE-2021-30497目录遍历漏洞
- 2024-02-22Spring Cloud Function SPEL 表达式注入漏洞
- 2024-02-22SolarWinds Network Performance Monitor UpdateActionsDescriptions SQL注入漏洞
- 2024-02-22OpenCart CVE-2022-24108不安全的反序列化漏洞
- 2024-02-22Abode Systems Inc. iota 命令注入漏洞
- 2024-02-22OpenCATS反射型跨站脚本漏洞
- 2024-02-22Delta Industrial Automation CNCSoft ScreenEditor堆栈缓冲区溢出漏洞
- 2024-02-22Atlassian Confluence Server和Data Center远程代码执行漏洞
- 2024-02-22Advanced Booking Calendar WordPress plugin反射型跨站脚本漏洞
- 2024-02-22Telos Alliance Omnia MPX Node 目录遍历漏洞
- 2024-02-22Microsoft Visual Studio Code Markdown Preview Enhanced扩展命令注入漏洞
- 2024-02-22Abode Systems Inc. iota 命令注入漏洞
- 2024-02-22YoudianCMS MailSendID SQL注入漏洞
- 2024-02-22YoudianCMS MailSendID SQL注入漏洞
- 2024-02-22Atlassian Questions For Confluence 硬编码凭据漏洞
- 2024-02-22Spring Cloud Function CVE-2022-22979 拒绝服务漏洞
- 2024-02-22Abode Systems Inc. iota.命令注入漏洞
- 2024-02-22Atlassian Confluence CVE-2023-22527 远程命令执行漏洞
- 2024-02-22Syncovery CVE-2022-36534 远程代码执行漏洞
- 2024-02-22Weblogic ForeignOpaqueReference 远程代码执行漏洞（CVE-2024-20931）
- 2024-02-22ConnectWise ScreenConnect 身份验证绕过漏洞（CVE-2024-1709）
- PoC2024-02-21用友NC IMsgCenterWebService 接口存在远程命令执行漏洞
- 2024-02-14Siemens Location Intelligence Perpetual 密钥硬编码漏洞
- 2024-02-09Dell EMC AppSync 日志信息泄露漏洞
- 2024-02-07Ivanti Avalanche 服务端请求伪造漏洞
- 2024-02-07Ivanti Avalanche Notification Server 不安全的反序列化漏洞
- 2024-02-07Ivanti Avalanche SmartDeviceServer DeviceLogsManager 目录遍历漏洞
- 2024-02-07Ivanti Avalanche SmartDeviceServer DeviceLogsManager 目录遍历漏洞
- 2024-02-07Ivanti Avalanche FileStoreConfig文件上传漏洞
- 2024-02-07Ivanti Avalanche Certificate Management Server 不安全的反序列化漏洞
- 2024-02-07Ivanti Avalanche WLAvalancheService.exe 堆栈缓冲区溢出漏洞
- 2024-02-07Ivanti Avalanche WLAvalancheService.exe 堆栈缓冲区溢出漏洞
- 2024-02-07Atlassian Confluence CVE-2023-22515 权限提升漏洞 (阶段3: 完成配置)
- 2024-02-07Atlassian Confluence CVE-2023-22515 权限提升漏洞 (阶段1: 属性修改)
- 2024-02-07Atlassian Confluence CVE-2023-22515 权限提升漏洞 (阶段2: 创建用户)
- 2024-02-07SolarWinds Network Performance Monitor CredentialInitializer 不安全的反序列化漏洞
- 2024-02-07VinChin Backup Recovery 认证绕过漏洞
- 2024-02-07OpenCATS Calendar Event CVE-2023-27294 存储型跨站脚本漏洞
- 2024-02-07Ivanti Avalanche JwtTokenUtility 不安全的反序列化漏洞
- 2024-02-07Ivanti Avalanche EnterpriseServer Service SQL 注入漏洞
- 2024-02-07Ivanti Avalanche Remote Control Server RCServlet setProperty 认证绕过漏洞
- 2024-02-07Ivanti Avalanche FileStoreConfig CVE-2023-32562 任意文件上传漏洞
- 2024-02-07Symmetricom SyncServer未授权远程命令执行漏洞
- 2024-02-07Ivanti Avalanche Web 文件服务器不安全反序列化漏洞
- 2024-02-07VinChin Backup Recovery 命令注入漏洞
- 2024-02-07Ivanti Avalanche Remote Control Server updateSkin 目录遍历漏洞
- 2024-02-07Ivanti Avalanche EnterpriseServer SetSettings processMessage 认证绕过漏洞
- 2024-02-07Ivanti Avalanche EnterpriseServer GetSettings 身份绕过漏洞