← 返回地图破甲

浏览报告

仅含 CVE

61 份报告 · 本页赏金 $0 · 清除筛选

Reflected XSS in stats‑video.php via improperly encoded URL parameters跨站脚本Revive Adserver低危—2026-06-25 XML‑RPC login leak exposes valid session ID enabling unauthorized API access访问控制Revive Adserver低危—2026-06-25 CSRF in zone‑include.php allows unauthorized banner and campaign linking跨站请求伪造Revive Adserver低危—2026-06-25 PHP code injection in delivery-limitation `logical` validation bypass - XML-RPC setChannelTargeting代码执行Revive Adserver中危—2026-06-25 Stored XSS in maintenance tools via unescaped entity names跨站脚本Revive Adserver低危—2026-06-25 PHP code injection in delivery-limitation `logical` validation bypass代码执行Revive Adserver中危—2026-06-25 Reflected XSS via unsanitised refresh parameter in zone invocation tag跨站脚本Revive Adserver低危—2026-06-25 Missing ownership validation allows cross‑manager tracker–campaign linking不安全的直接对象引用Revive Adserver低危—2026-06-25 PHP code injection via unexpected delivery limitation parameter代码执行Revive Adserver中危—2026-06-03 Stored XSS via malicious usernames in audit log details + Username validation bypass in XML‑RPC addUser跨站脚本Revive Adserver低危—2026-06-03 Banner status override by advertiser‑level users访问控制Revive Adserver低危—2026-06-03 Missing access control when modifying parent entities via XML‑RPC访问控制Revive Adserver低危—2026-06-03 Session ID reuse allowing XML‑RPC API authentication bypass身份认证Revive Adserver低危—2026-06-03 Stored XSS via Full Name field in userlog email entries跨站脚本Revive Adserver低危—2026-06-03 PHP code injection via delivery limitation logical代码执行Revive Adserver中危—2026-06-03 Reflected XSS via clientid parameter in zone‑include.php跨站脚本Revive Adserver低危—2026-06-03 Blind SQL injection via clientid parameter in zone‑include.phpSQL 注入Revive Adserver中危—2026-06-03 Missing access control when linking trackers to campaigns访问控制Revive Adserver低危—2026-06-03 Missing access control when linking banners or campaigns to zones访问控制Revive Adserver低危—2026-06-03 [revive-adserver] Reflected XSS in Banner Delivery Options via cap parameter跨站脚本Revive Adserver低危—2026-01-14 Reflected XSS in banner-acl.php and channel-acl.php via executionorder跨站脚本Revive Adserver低危—2026-01-14 Reflected XSS in afr.php跨站脚本Revive Adserver低危—2026-01-14 Broken Access Control allows advertiser accounts to delete trackers they do not own访问控制Revive Adserver中危—2026-01-14 INI Format string injection in Revive Adserver 6.0.4 settings代码执行Revive Adserver低危—2026-01-14 Username Validation Bypass身份认证Revive Adserver低危—2025-11-26