glzjin

Nomeglzjin
Iscriviti07/12/2023
Punti Della Comunità1932
Commits3
Invia107
Messaggi0
Voto Positivo0
RangoEsperto senior
Activity Badges
💻 Digital Nomad
🔬 Researcher
🐘 Heavy User
🖖 Community Member (38x)
👋 Regular Visitor (2x)
📤 Submitter (19x)

Invia (107)

Sequenza temporale (107)

IDTitoloSottomissioneModerazioneVocePStato
471663Yunzmall <=2.4.2 Arbitrary User Password Reset Vulnerability29/12/202408/01/202529081917Accettato
470601KaiYuanTong ECT platform <=2.0.0 Pre-Auth Command Execution28/12/202408/01/202529079220Accettato
467703FoxCMS <=1.2.0 Auth bypass22/12/202422/12/202428917117Accettato
467658FoxCMS <=1.2 Config injection22/12/202422/12/202428917018Accettato
420942Xxxxxxxxxx Xxxxxxxxxx Xxxxxx ≤xxx-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Xxx09/10/202417/10/2024
 
0Respinto
418417QileCMS ≤v1.1.3 Authorization Bypass05/10/202412/10/202428023418Accettato
293104Gacjie Servers Data Management System <=1.0 Arbitrary File Upload04/03/202412/03/202425650320Accettato
287591LightPicture LightPicture <=v1.2.2 Post-Authentication File Upload25/02/202427/02/202425485620Accettato
287588LightPicture LightPicture <=v1.2.2 Authentication bypass25/02/202427/02/202425485520Accettato
282802DM Enterprise Website Building System DM Enterprise Website Building System <=2022.8 Authentication bypass15/02/202423/02/202425460520Accettato
280599TemmokuMVC TemmokuMVC <=2.3 Arbitrary File Creation11/02/202422/02/202425453220Accettato
280001Shopwind Shopwind <=4.6 Configuration injection09/02/202421/02/202425439320Accettato
279774Xxxxxx Xxxxxx <=x.x.x Xxxxxxxxx Xxxx Xxxxxx09/02/202410/02/2024
 
0Respinto
279560PEShop PEShop <=1.0 Deserialize08/02/202408/02/202425322620Accettato
278199PEShop PEShop <=1.0 Auth-Bypass06/02/202406/02/20242473570Duplicato
277749JPShop JPShop <=1.5.02 Arbitrary file upload05/02/202406/02/202425300320Accettato
277705Jpshop Jpshop <=1.5.02 Arbitrary File Upload05/02/202406/02/202425300220Accettato
277681JPShop JPShop <=1.5.02 Arbitrary file upload05/02/202406/02/202425300120Accettato
277446JPShop JPShop <=1.5.02 Arbitrary file upload04/02/202406/02/202425300020Accettato
277443JPShop JPShop <=1.5.02 Arbitrary File Upload04/02/202406/02/202425299920Accettato
277432JPShop JPShop <=1.5.02 Arbitrary File Upload04/02/202406/02/202425299820Accettato
277418JPShop JPShop <=1.5.02 Auth-Bypass04/02/202406/02/202425299720Accettato
276044Whatsns Whatsns <=6.0.3 Deserialization01/02/202402/02/202425269620Accettato
275593OpenBi OpenBi <=1.0.8 Pre-Authentication Arbitrary File Creation31/01/202431/01/202425247519Accettato
275532OpenBi OpenBi <=1.0.8 Pre-authentication arbitrary file upload31/01/202431/01/202425247420Accettato
275527OpenBi OpenBi <=1.0.8 Command injection31/01/202431/01/202425247319Accettato
275524OpenBi OpenBi <=1.0.8 Pre-authentication arbitrary file creation31/01/202431/01/202425247220Accettato
275512OpenBi OpenBi <=1.0.8 Pre-authentication arbitrary file upload31/01/202431/01/202425247120Accettato
274628OpenBi OpenBi <=1.0.8 Pre-Authentication Arbitrary File Upload29/01/202429/01/202425231120Accettato
274618OpenBi OpenBi <=1.0.8 Pre-Authentication Arbitrary File Upload29/01/202429/01/202425231020Accettato
274616OpenBi OpenBi <=1.0.8 Arbitrary file upload29/01/202429/01/202425230920Accettato
274606OpenBi OpenBi <=1.0.8 Arbitrary File Read29/01/202429/01/202425230818Accettato
274595OpenBi OpenBi <=1.0.8 Arbitrary File Read29/01/202429/01/202425230720Accettato
271826QiboSoft QiboCMS X1 <=1.0.6 Remote code execution23/01/202405/02/202425284720Accettato
271175NODERP NODERP <=V6.0.2 Authentication bypass22/01/202429/01/202425227520Accettato
271141NODERP NODERP <=6.0.2 Sensitive information leakage22/01/202429/01/202425227419Accettato
270934KuERP KuERP <=1.0.4 Post-Authentication Arbitrary File Deletion21/01/202428/01/202425225420Accettato
270927KuERP KuERP <=1.0.4 Authentication bypass21/01/202428/01/202425225320Accettato
270901KuERP KuERP <=1.0.4 Significant information leak21/01/202428/01/202425225218Accettato
270221Leadshop Leadshop <=1.4.20 Configuration injection vulnerability19/01/202419/01/202425156220Accettato
27017660IndexPage 60IndexPage ≤v1.8.5 SSRF19/01/202426/01/202425219020Accettato
27017560IndexPage 60IndexPage <=v1.8.5 SSRF19/01/202426/01/202425218920Accettato
269724SMSot SMSot <=2.12 SQL Injection18/01/202419/01/202425155719Accettato
269722Smsot Smsot ≤2.12 SQL Injection18/01/202419/01/202425155620Accettato
267650ZhiHuiYun ZhiHuiYun <=4.4.13 Arbitrary File Upload14/01/202417/01/202425137520Accettato
267627YunyouCMS YunyouCMS <=2.2.6 Arbitrary File Include14/01/202417/01/202425137420Accettato
267409ZhiCms ZhiCms <=4.0 Pre-authentication deserialization13/01/202416/01/202425083920Accettato
266845HaoKeKeJi YiQiNiu ≤3.1 Pre-authentication Server Side Request Forgery12/01/202412/01/202425065220Accettato
266022Taokeyun Taokeyun <=1.0.5 SQL Injection11/01/202412/01/202425058820Accettato
266018Taokeyun Taokeyun <=1.0.5 SQL Injection11/01/202412/01/202425058720Accettato
266016Taokeyun Taokeyun ≤1.0.5 SQL Injection11/01/202412/01/202425058620Accettato
265998Taokeyun Taokeyun ≤1.0.5 SQL Injection11/01/202412/01/202425058520Accettato
265989Taokeyun Taokeyun ≤1.0.5 SQL Injection11/01/202412/01/202425058420Accettato
264724DESHANG DSShop <=3.1.0 Arbitrary File Deletion09/01/202411/01/202425043720Accettato
264672DESHANG DSMall <=6.1.0 Arbitrary File Delete09/01/202411/01/202425043620Accettato
264616DESHANG DSMall <=6.1.0 Arbitrary files create09/01/202411/01/202425043520Accettato
264406DESHANG DSCMS <=3.1.2 Pre-Authentication Arbitrary File Download09/01/202411/01/202425043420Accettato
264117DESHANG DSKMS <=3.1.2 Pre-authentication arbitrary file download08/01/202411/01/202425043320Accettato
263994DESHANG Dsshop <=3.1.0 Pre-Authentication Arbitrary File Download08/01/202411/01/202425043220Accettato
263828DESHANG DSMall <=6.1.0 Pre-authentication arbitrary file download08/01/202411/01/202425043120Accettato
263482DESHANG DSO2O ≤4.1.0 Pre-Authentication Arbitrary File Download07/01/202409/01/202425012520Accettato
263452Unknown-O Download-Station ≤1.1.8 Pre-authentication arbitrary file download07/01/202409/01/202425012120Accettato
263274TenSent SentCMS ≤4.0.5 Pre-Auth Arbitrary File upload06/01/202411/01/20241944980Duplicato
263253Likeshop Likeshop ≤2.5.7.20210311 Pre-authentication arbitrary file upload06/01/202409/01/202425012020Accettato
263105XSot TimeMail ≤v1.1 SQL Injection06/01/202409/01/202425011220Accettato
262755Inis Inis blog system ≤v2.0.1 Arbitrary File Creation, Pre-Authentication Vulnerability05/01/202409/01/202425011020Accettato
262724Inis Inis blog system ≤v2.0.1 Arbitrary File Read05/01/202409/01/202425010920Accettato
262677Inis Inis ≤v2.0.1 SSRF05/01/202407/01/202424987520Accettato
262658cxbsoft Post-Office <=1.0 SQL Injection05/01/202414/01/202425070020Accettato
262646cxbsoft Post-Office ≤v1.0 SQL Injection05/01/202414/01/202425069920Accettato
262640cxbsoft Post-Office ≤v1.0 SQL Injection05/01/202414/01/202425069820Accettato
262620Youke365 Youke365 ≤v1.5.3 SSRF05/01/202407/01/202424987120Accettato
262599Youke365 Youke365 ≤v1.5.3 SSRF05/01/202407/01/202424987020Accettato
262351cxbsoft UrlShorting ≤v1.3.1 SQL Injection04/01/202414/01/202425069720Accettato
262347Cxbsoft UrlShorting ≤v1.3.1 SQL Injection04/01/202414/01/202425069620Accettato
262346Cxbsoft UrlShorting ≤v1.3.1 SQL Injection04/01/202414/01/202425069520Accettato
262341CXBSoft UrlShorting ≤v1.3.1 SQL Injection04/01/202414/01/202425069420Accettato
260982SKyTech HuiRan(XinKa) Host Reseller System <=2.0.0 Authentication Bypass01/01/202401/01/202424944420Accettato
259244gopeak MasterLab ≤v3.3.10 Post-Auth File Upload28/12/202328/12/20232491810Duplicato
259243gopeak MasterLab ≤v3.3.10 Post-Auth File Upload28/12/202328/12/202324918120Accettato
259240gopeak MasterLab ≤v3.3.10 File Upload28/12/202328/12/202324915020Accettato
258788gopeak MasterLab ≤v3.3.10 Pre-Auth SQL Injection27/12/202328/12/202324914820Accettato
258787gopeak MasterLab ≤v3.3.10 Pre-Auth SQL Injection27/12/202328/12/20232491490Duplicato
258786gopeak MasterLab ≤v3.3.10 Pre-Auth SQL Injection27/12/202328/12/202324914920Accettato
258782gopeak MasterLab ≤v3.3.10 Pre-Auth SQL Injection27/12/202328/12/202324914720Accettato
258677OneNav OneNav ≤beta 0.9.33 Auth bypass27/12/202305/01/202424976516Accettato
257955Xxxx Xxxx ≤x.x.x Xxxxxxxx Xxxx Xxxxxx25/12/202330/12/2023
 
0Respinto
257954Xxxx Xxxx ≤x.x.x Xxxx-xxxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxxx - Xxx25/12/202330/12/2023
 
0Respinto
257953MTab MTab ≤1.2.6 Improper Access Control25/12/202330/12/202324939517Accettato
257435Fahuo100 Fahuo100 ≤v1.1_build20230918 SQL Injection23/12/202330/12/202324939020Accettato
2570587-card Fakabao ≤v1.0_build20230805 SQL Injection22/12/202330/12/202324938819Accettato
2570337-card Fakabao ≤v1.0_build20230805 SQL Injection22/12/202330/12/202324938720Accettato
2570297-card Fakabao ≤v1.0_build20230805 SQL Injection22/12/202330/12/202324938618Accettato
2570067-card Fakabao ≤v1.0_build20230805 SQL Injection22/12/202330/12/202324938519Accettato
256839icret EasyImages2.0 <=2.83 Pre-Auth Path Traversal22/12/202324/12/202324895020Accettato
256389S-CMS S-CMS-DWZ ≤v2.0_build20220529-20231006 SQL Injection21/12/202330/12/202324939319Accettato
254976S-CMS S-CMS-DWZ ≤v2.0_build20220529-20261006 SQL Injection19/12/202330/12/202324939220Accettato
254971S-CMS S-CMS-DWZ ≤v2.0_build20220529-20261006 SQL Injection19/12/202330/12/202324939119Accettato
253668KylinSoft kylin-system-updater ≤ 2.0.5.16-0k2.33 local privilege escalation15/12/202324/12/202324894018Accettato
251098KylinSoft hedron-domain-hook <=3.8.0.12-0k0.5 local privilege escalation12/12/202320/12/202324857820Accettato
250379KodExplorer KodExplorer ≤ 4.51.03 Auth bypass, unrestricted file read, RCE11/12/202315/12/202324822117Accettato
250378KodExplorer KodExplorer ≤ 4.51.03 Auth bypass, unrestricted file read, RCE11/12/202315/12/202324822017Accettato
250289KodExplorer KodExplorer <=4.51.03 Auth bypass && file extract unrestricted to RCE11/12/202315/12/202324821917Accettato
250188KodExplorer KodExplorer <=4.51.03 Auth bypass && file upload unrestricted to RCE11/12/202315/12/202324821816Accettato
250041KodBox KodBox <=1.48 Command Injection10/12/202315/12/202324821015Accettato
249972Kodbox Kodbox 1.48 Command Injection10/12/202315/12/202324820914Accettato
248945PHPEMS PHPEMS 6/7 验证绕过 && RCE07/12/202309/12/202324735720Accettato

Commits (3)

Sequenza temporale (3)

IDVoceCVEAggiornatoModerazioneCP
15360103PHPEMS Session Data session.cls.php escalationi di privilegiCVE-2023-665411/01/202411/01/202413
15360102DeShang DSMall MemberAuth.phpCVE-2024-041611/01/202411/01/202413
15359974DeShang DSShop MemberAuth.phpCVE-2024-041711/01/202411/01/202413

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to know what is going to be exploited?

We predict KEV entries!