← 返回地图破甲

浏览报告

仅含 CVE

88 份报告 · 本页赏金 $150 · 2025 年 · 仅含 CVE · 清除筛选

Remote Code Execution identified on IBM endpoint.代码执行IBM高危—2025-12-31 [RCE] Remote Code Execution via React Server Components Vulnerability CVE-2025-55182代码执行IBM高危—2025-12-18 Username Validation Bypass身份认证Revive Adserver低危—2025-11-26 Potential SQL Injection when annotating FilteredRelation on PostgreSQLSQL 注入Django中危—2025-12-02 Unrestricted setPerPage allows huge result sets / resource exhaustion / mass log retrieval拒绝服务Revive Adserver低危—2025-11-19 Username normalization missing allows visually indistinguishable accounts (Whitespace-Based Impersonation)注入与走私Revive Adserver低危—2025-11-19 Stored-XSS in campaign name displayed in Banners modal跨站脚本Revive Adserver低危—2025-11-19 Stored-XSS in Banner Name field跨站脚本Revive Adserver低危—2025-11-19 Reflected XSS in /admin/banner-zone.php (v6.0.0+)跨站脚本Revive Adserver低危—2025-11-19 Information Disclosure via Verbose Error Messages信息泄露Revive Adserver低危—2025-11-19 IDOR Vulnerability in Banner Deletion不安全的直接对象引用Revive Adserver中危—2025-11-19 Information Disclosure via “Add user” lookup in Account Management (User Access)信息泄露Revive Adserver低危—2025-11-19 Stored XSS in Conversion Statistics via Tracker Name跨站脚本Revive Adserver中危—2025-11-19 Stored XSS on inventory-retrieve.php跨站脚本Revive Adserver低危—2025-11-19 Improper sanitisation of input in the settings could cause DoS业务逻辑Revive Adserver低危—2025-11-19 Reflected XSS in account-preferences-plugin.php跨站脚本Revive Adserver低危—2025-11-19 Authorization bypass allows changing email address of other users访问控制Revive Adserver中危—2025-11-19 Error-Based & Time-Based SQL Injection in 'keyword' Parameter of admin-search.php Allowing Full Database Access in Revive Adserver v6.0.0SQL 注入Revive Adserver中危—2025-10-24 Stored XSS Vulnerability via SVG File跨站脚本Nextcloud低危$1502025-12-05 CVE-2025-10966: missing SFTP host verification with wolfSSH密码学缺陷curl低危—2025-11-05 Approval app allows users to request approval for other users file身份认证Nextcloud低危—2025-12-05 Nextcloud Tables v1 Share Enumeration Without Authorization (Regression of CVE-2024-52507)身份认证Nextcloud低危—2025-12-05 Confirmed Security Misconfigurations on curl.se (BREACH, Missing Security Headers, ETag Info Disclosure)信息泄露curl低危—2025-09-09 CVE-2025-10148: predictable WebSocket mask密码学缺陷curl低危—2025-09-10 Path traversal via archive.extract - CVE 2021-3281 incomplete patch路径遍历Django低危—2025-11-21