<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"><channel><title>Doonsec's feed</title><link>http://wechat.doonsec.com/MzkzODY3ODI0Nw.xml</link><description>The latest security articles about WeChat official account</description><language>zh-CN</language><lastBuildDate>Tue, 18 Feb 2025 13:38:05 GMT</lastBuildDate><generator>PyRSS2Gen-1.1.0</generator><docs>http://blogs.law.harvard.edu/tech/rss</docs><image><url>http://wechat.doonsec.com/</url><title>Doonsec</title><link>http://wechat.doonsec.com/static/front/img/doonsec_bak3.png</link></image><item><title>Wazuh安全监控平台 任意命令执行漏洞 CVE-2025-24016</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484110&amp;idx=1&amp;sn=d58c07b2f8c570d51ec6391f5367ac2a</link><description>Wazuh安全监控平台 任意命令执行漏洞 CVE-2025-24016</description><author>巨黑科</author><category>巨黑科</category><pubDate>2025-02-18T08:57:58</pubDate></item><item><title>Cacti网络流量监测图形分析工具 任意文件写入漏洞 CVE-2025-22604</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484106&amp;idx=1&amp;sn=b4be72b27886e7eb52c4f279aba397a9</link><description>Cacti网络流量监测图形分析工具 任意文件写入漏洞 CVE-2025-22604</description><author>巨黑科</author><category>巨黑科</category><pubDate>2025-02-17T15:28:08</pubDate></item><item><title>Jenkins 任意命令执行漏洞 CVE-2024-43044</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484101&amp;idx=1&amp;sn=902163048d1df69f6f5b087f11e8e1e8</link><description></description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-09-02T18:17:39</pubDate></item><item><title>FastAdmin 任意文件读取 CVE-2024-7928</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484095&amp;idx=1&amp;sn=1eb3cdf569f7337164be372a0b342183</link><description>FastAdmin 任意文件读取 CVE-2024-7928</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-08-22T11:15:37</pubDate></item><item><title>ApacheOFBiz 任意命令执行漏洞 CVE-2024-38856</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484077&amp;idx=1&amp;sn=45f0b3f238b6293cdb4336f3b382fbf0</link><description>ApacheOFBiz 任意命令执行漏洞 CVE-2024-38856</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-08-06T13:17:16</pubDate></item><item><title>GeoServer 任意命令执行漏洞 CVE-2024-36401</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484071&amp;idx=1&amp;sn=ef554128103eb1006e89c624cb3658a4</link><description>GeoServer 任意命令执行漏洞 CVE-2024-36401</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-07-04T10:27:53</pubDate></item><item><title>Apache-HugeGraph-Server 任意命令执行漏洞 CVE-2024-27348</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484065&amp;idx=1&amp;sn=cacf210ebcee423a9460990d48fa74fc</link><description>Apache-HugeGraph-Server 任意命令执行漏洞 CVE-2024-27348</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-06-18T08:00:48</pubDate></item><item><title>SolarWinds Serv-Uxa0FTP Server 任意文件读取漏洞 CVE-2024-28995</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484061&amp;idx=1&amp;sn=d606b351c4998e8371e448cb5877aa11</link><description>SolarWinds Serv-Uxa0FTP Server 任意文件读取漏洞 CVE-2024-28995</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-06-17T16:28:25</pubDate></item><item><title>Rejetto HTTP文件服务器（HFS）任意命令执行漏洞 CVE-2024-23692</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484050&amp;idx=1&amp;sn=f689a4e6d15a2ec72969c99b64646221</link><description>Rejetto HTTP文件服务器（HFS）任意命令执行漏洞 CVE-2024-23692</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-06-12T09:45:23</pubDate></item><item><title>Veeam Backup Enterprise Manager（VBEM）xa0身份验证绕过漏洞 CVE-2024-29849</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484046&amp;idx=1&amp;sn=364116b8793b8736a22893e096be4521</link><description>Veeam Backup Enterprise Manager（VBEM）xa0身份验证绕过漏洞 CVE-2024-29849</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-06-11T17:32:17</pubDate></item><item><title>php-cgi 远程代码执行漏洞 CVE-2024-4577</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484039&amp;idx=1&amp;sn=b790fb11a793d7d25e2ab083c659b111</link><description>php-cgi 远程代码执行漏洞 CVE-2024-4577</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-06-07T16:26:22</pubDate></item><item><title>Qdrant矢量数据库 路径遍历漏洞 CVE-2024-3584</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484034&amp;idx=1&amp;sn=079cde6d4afdc0eb82322f3421a5ef2b</link><description>Qdrant矢量数据库 路径遍历漏洞 CVE-2024-3584</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-06-04T10:10:47</pubDate></item><item><title>Check Point Security Gateways 任意文件读取漏洞 CVE-2024-24919</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484030&amp;idx=1&amp;sn=cb6e2a29f5163f3823d4064bfa73365d</link><description>Check Point Security Gateways 任意文件读取漏洞 CVE-2024-24919</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-06-03T09:30:13</pubDate></item><item><title>Laykefu客服系统 任意文件上传漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484026&amp;idx=1&amp;sn=3e42586130e32a69826721f78b22b53d</link><description>Laykefu客服系统 任意文件上传漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-31T08:00:56</pubDate></item><item><title>Tenda路由器 密码信息泄露漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484020&amp;idx=1&amp;sn=fca9c73e26b2f16664b952973d31a970</link><description>Tenda路由器 密码信息泄露漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-30T08:03:51</pubDate></item><item><title>Netgear路由器 任意命令执行漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484013&amp;idx=1&amp;sn=065932887ace720ae21f8485a5dadf00</link><description>Netgear路由器 任意命令执行漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-29T08:00:26</pubDate></item><item><title>思福迪运维安全管理系统 任意命令执行漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484009&amp;idx=1&amp;sn=a3daf8a8adc7f76f1534ed2bb7b51ee7</link><description>思福迪运维安全管理系统 任意命令执行漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-28T08:01:03</pubDate></item><item><title>CERIO-DT系列路由器 任意命令执行漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247484002&amp;idx=1&amp;sn=fa41ee78d6b9f9a149e8050725dc0104</link><description>CERIO-DT系列路由器 任意命令执行漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-27T09:50:07</pubDate></item><item><title>Fortinet FortiSIEM 任意命令执行漏洞 CVE-2023-34992</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483997&amp;idx=1&amp;sn=8bc67ac6a8c5e0a20cc9d5b94fdac93b</link><description>Fortinet FortiSIEM 任意命令执行漏洞 CVE-2023-34992</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-26T12:23:20</pubDate></item><item><title>Sonatype Nexus Repository Manager 路径遍历漏洞 CVE-2024-4956</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483991&amp;idx=1&amp;sn=3f056c759e43cf6e02a28675ec2c8856</link><description>Sonatype Nexus Repository Manager 路径遍历漏洞 CVE-2024-4956</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-25T08:00:53</pubDate></item><item><title>Atlassian Confluence（知识管理工具） 任意命令执行漏洞 CVE-2024-21683</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483990&amp;idx=1&amp;sn=99aaec1c2f9bcb1422e40cfc5c27cda3</link><description>Atlassian Confluence（知识管理工具） 任意命令执行漏洞 CVE-2024-21683</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-24T10:28:46</pubDate></item><item><title>契约锁电子签章系统 任意命令执行漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483981&amp;idx=1&amp;sn=5ac607508a8110c0385ba9d0eb9ea27e</link><description>契约锁电子签章系统 任意命令执行漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-23T08:00:08</pubDate></item><item><title>H3C网络管理系统 任意文件读取漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483977&amp;idx=1&amp;sn=81da8a7836396a240933a4648c9baad5</link><description>H3C网络管理系统 任意文件读取漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-22T08:00:17</pubDate></item><item><title>Grav CMS 任意文件读取漏洞 CVE-2024-34082</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483973&amp;idx=1&amp;sn=6fba1762d38a03dfab5c98c3b74e0b87</link><description>Grav CMS 任意文件读取漏洞 CVE-2024-34082</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-21T08:01:36</pubDate></item><item><title>Atlassian Confluence（知识管理工具） 任意命令执行漏洞 CVE-2023-22527</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483969&amp;idx=1&amp;sn=a6f3f3bcba69d51fc7039554a7397465</link><description>Atlassian Confluence（知识管理工具） 任意命令执行漏洞 CVE-2023-22527</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-20T08:00:25</pubDate></item><item><title>AJ-Report数据大屏 任意命令执行漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483965&amp;idx=1&amp;sn=62d04b31ebce7f83d203f94879b87d26</link><description>AJ-Report数据大屏 任意命令执行漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-19T08:00:39</pubDate></item><item><title>Fortra FileCatalyst Workflow 任意文件上传漏洞 CVE-2024-25153</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483962&amp;idx=1&amp;sn=2e1d2a60cce8c2151c8b2ad16c8fdb19</link><description>Fortra FileCatalyst Workflow 任意文件上传漏洞 CVE-2024-25153</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-18T08:00:19</pubDate></item><item><title>Apache OFBiz 目录遍历漏洞 CVE-2024-32113</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483958&amp;idx=1&amp;sn=01d0310af2257e502dfdd818d18e00fd</link><description>Apache OFBiz 目录遍历漏洞 CVE-2024-32113</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-17T08:03:46</pubDate></item><item><title>Mura CMS SQL注入漏洞 CVE-2024-32640</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483957&amp;idx=1&amp;sn=86005a085c16a143d856cee5c9765d34</link><description>Mura CMS SQL注入漏洞 CVE-2024-32640</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-16T08:00:49</pubDate></item><item><title>Cacti网络流量监测图形分析工具 任意命令执行漏洞 CVE-2024-29895</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483955&amp;idx=1&amp;sn=c41bee779c1330cb09f1765d712bc067</link><description>Cacti网络流量监测图形分析工具 任意命令执行漏洞 CVE-2024-29895</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-15T08:01:46</pubDate></item><item><title>Smart多业务安全网关智能管理平台 任意文件上传漏洞 CVE-2024-0300</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483949&amp;idx=1&amp;sn=387d145a11ed53da0358bed85f8ce257</link><description>Smart多业务安全网关智能管理平台 任意文件上传漏洞 CVE-2024-0300</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-14T08:00:33</pubDate></item><item><title>Joomla内容管理系统 未授权访问漏洞 CVE-2023-23752</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483945&amp;idx=1&amp;sn=a09bfd0c237085e663991b655d4affe8</link><description>Joomla内容管理系统 未授权访问漏洞 CVE-2023-23752</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-13T08:00:33</pubDate></item><item><title>CData API Server 路径遍历漏洞 CVE-2024-31849</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483941&amp;idx=1&amp;sn=9d9236915937bd58dd8338d0367559a3</link><description>CData API Server 路径遍历漏洞 CVE-2024-31849</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-12T08:01:02</pubDate></item><item><title>TBK DVR硬盘录像机 任意命令执行漏洞 CVE-2024-3721</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483937&amp;idx=1&amp;sn=e7fc73918f40b09d3cbba74ef71a1b71</link><description>TBK DVR硬盘录像机 任意命令执行漏洞 CVE-2024-3721</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-11T08:00:24</pubDate></item><item><title>ZenML 任意用户密码修改漏洞 CVE-2024-25723</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483930&amp;idx=1&amp;sn=95bfd34aa11a446eafdbd9e2fb870126</link><description>ZenML 任意用户密码修改漏洞 CVE-2024-25723</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-10T08:00:17</pubDate></item><item><title>lvanti VPN 任意命令执行漏洞 CVE-2024-21887</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483922&amp;idx=1&amp;sn=2b3fc2ea5808c983dc7755b86ae4d653</link><description>lvanti VPN 任意命令执行漏洞 CVE-2024-21887</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-09T08:00:14</pubDate></item><item><title>Linksys E5600路由器 任意命令执行漏洞 CVE-2024-33789</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483915&amp;idx=1&amp;sn=191686c769324aab189f305f29d03919</link><description>Linksys E5600路由器 任意命令执行漏洞 CVE-2024-33789</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-08T08:01:12</pubDate></item><item><title>Linksys E5600路由器 任意命令执行漏洞 CVE-2024-33788</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483914&amp;idx=1&amp;sn=18280998ed3087c7fc38881c894980ac</link><description>Linksys E5600路由器 任意命令执行漏洞 CVE-2024-33788</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-07T08:01:17</pubDate></item><item><title>Telesquare路由器 任意命令执行漏洞 CVE-2024-29269</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483903&amp;idx=1&amp;sn=33d9e8fc2e718603f93284e16fe9734b</link><description>Telesquare路由器 任意命令执行漏洞 CVE-2024-29269</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-06T16:02:43</pubDate></item><item><title>EasyCVR智能边缘网关（视频汇聚平台）密码信息泄露漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483898&amp;idx=1&amp;sn=7977a695e616d9578095f9d6330f2ee7</link><description>EasyCVR智能边缘网关（视频汇聚平台）密码信息泄露漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-05T08:00:26</pubDate></item><item><title>OpenMetadata 任意命令执行漏洞 CVE-2024-28253</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483894&amp;idx=1&amp;sn=d7f229112d339726cc29f0bbc90a9959</link><description>OpenMetadata 任意命令执行漏洞 CVE-2024-28253</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-04T08:03:48</pubDate></item><item><title>SpiderFlow爬虫平台 任意命令执行漏洞 CVE-2024-0195</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483888&amp;idx=1&amp;sn=9c6d4eedff76110154944d405665d22a</link><description>SpiderFlow爬虫平台 任意命令执行漏洞 CVE-2024-0195</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-03T08:02:41</pubDate></item><item><title>SpringBlade SQL注入漏洞 CVE-2024-33332</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483886&amp;idx=1&amp;sn=febd607325f6469a482a035efac56575</link><description>SpringBlade SQL注入漏洞 CVE-2024-33332</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-02T08:15:19</pubDate></item><item><title>Progress Kemp LoadMaster 任意命令执行漏洞 CVE-2024-1212</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483881&amp;idx=1&amp;sn=35791b3b7da0ebfc50287d8c290e416d</link><description>Progress Kemp LoadMaster 任意命令执行漏洞 CVE-2024-1212</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-05-01T08:14:18</pubDate></item><item><title>Linux 内核提权漏洞 CVE-2024-1086</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483875&amp;idx=1&amp;sn=664bc17d93cd8ae9158fe7fca6149e25</link><description>Linux 内核提权漏洞 CVE-2024-1086</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-30T08:00:13</pubDate></item><item><title>Panabit Panalog大数据日志审计系统 命令执行漏洞 CVE-2024-31601</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483869&amp;idx=1&amp;sn=ff57900b946edf5c09bfc38676a301a5</link><description>Panabit Panalog大数据日志审计系统 命令执行漏洞 CVE-2024-31601</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-29T08:14:29</pubDate></item><item><title>ZenTao（禅道）身份认证绕过漏洞 QVD-2024-15263</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483862&amp;idx=1&amp;sn=e23f33ca4e2e707972da315662ba10d6</link><description>ZenTao（禅道）身份认证绕过漏洞 QVD-2024-15263</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-28T08:27:39</pubDate></item><item><title>Progress Flowmon 任意命令执行漏洞 CVE-2024-2389</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483851&amp;idx=1&amp;sn=15c9d4c442ded39e1bf8b2e1b29d6d8a</link><description>Progress Flowmon 任意命令执行漏洞 CVE-2024-2389</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-27T08:00:49</pubDate></item><item><title>FortiClientEMS SQL注入漏洞 CVE-2023-48788</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483846&amp;idx=1&amp;sn=e4b9cecf7ba59a11d3f13efc92ce9805</link><description>FortiClientEMS SQL注入漏洞 CVE-2023-48788</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-26T08:00:36</pubDate></item><item><title>CrushFTP 任意文件读取漏洞 CVE-2024-4040</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483840&amp;idx=1&amp;sn=76edbca2f512a2a86ac5e171f7a42c1e</link><description>CrushFTP 任意文件读取漏洞 CVE-2024-4040</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-25T08:01:57</pubDate></item><item><title>JetBrains TeamCity 任意命令执行漏洞 CVE-2024-23917</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483839&amp;idx=1&amp;sn=5088b2fa20601d6aa417e63e1ca68b4f</link><description>JetBrains TeamCity 任意命令执行漏洞 CVE- 2024-23917</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-24T08:02:37</pubDate></item><item><title>CuteHttpFileServer 任意文件下载漏洞 CVE-2024-31552</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483825&amp;idx=1&amp;sn=c0a13bf127ba7f2d57df3f014c62a24a</link><description>CuteHttpFileServer 任意文件下载漏洞 CVE-2024-31552</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-23T08:00:35</pubDate></item><item><title>思科集成管理控制器（Cisco IMC） 任意命令执行漏洞 CVE-2024-20356</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483816&amp;idx=1&amp;sn=439f97191a496993da3b1827b9646262</link><description>思科集成管理控制器（Cisco IMC） 任意命令执行漏洞 CVE-2024-20356</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-22T09:07:19</pubDate></item><item><title>TP-Link Archer AX-21路由器 任意命令执行漏洞 CVE-2023-1389</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483814&amp;idx=1&amp;sn=bade32aff856d3e1958093163326e7cb</link><description>TP-Link Archer AX-21路由器 任意命令执行漏洞 CVE-2023-1389</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-21T08:00:35</pubDate></item><item><title>Windows 内核提权漏洞 CVE-2024-21338</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483809&amp;idx=1&amp;sn=4b1493830d483f0cb88d07321eaeec5d</link><description>Windows 内核提权漏洞 CVE-2024-21338</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-20T08:00:43</pubDate></item><item><title>kkfileview 任意命令执行漏洞</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483797&amp;idx=1&amp;sn=2f95ab176b9d759ba4fc8598074c2472</link><description>kkfileview 任意命令执行漏洞</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-19T08:00:45</pubDate></item><item><title>PAN-OS（Palo Alto Networks）防火墙 任意命令执行漏洞xa0CVE-2024-3400</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483788&amp;idx=1&amp;sn=e3c692bbcb0bc2010e3fcea4dc5b1b46</link><description>PAN-OS（Palo Alto Networks）防火墙 任意命令执行漏洞xa0CVE-2024-3400</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-18T11:01:28</pubDate></item><item><title>OpenMetadata 任意命令执行漏洞 CVE-2024-28254</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483780&amp;idx=1&amp;sn=017e5ab73c12addace9f662e9e28548c</link><description>OpenMetadata 任意命令执行漏洞 CVE-2024-28254</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-17T08:00:44</pubDate></item><item><title>Zeppelin 任意命令执行漏洞 CVE-2024-31861</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483778&amp;idx=1&amp;sn=710a4c8aa4d7e0cd4dccc2c5951197d7</link><description>Zeppelin 任意命令执行漏洞 CVE-2024-31861</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-16T08:00:19</pubDate></item><item><title>OpenMetadata 任意命令执行漏洞 CVE-2024-28848</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483769&amp;idx=1&amp;sn=625930dbbb613c1301e8b4498f0f462c</link><description>OpenMetadata 任意命令执行漏洞 CVE-2024-28848</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-15T08:32:09</pubDate></item><item><title>JumpServer 远程代码执行漏洞 CVE-2024-29201、后台模板注入漏洞 CVE-2024-29202</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483747&amp;idx=1&amp;sn=69769a4cfde5a1c700795c97a6e5a74c</link><description>JumpServer 远程代码执行漏洞 CVE-2024-29201、后台模板注入漏洞 CVE-2024-29202</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-14T15:41:47</pubDate></item><item><title>OpenMetadata 任意命令执行漏洞 CVE-2024-28255</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483743&amp;idx=1&amp;sn=787a395c743a1a363afabf4828bf6d03</link><description>OpenMetadata 任意命令执行漏洞 CVE-2024-28255</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-13T08:00:13</pubDate></item><item><title>ActiveMQ 命令执行漏洞 CVE-2023-46604</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483736&amp;idx=1&amp;sn=c2d65a74003f7bfaf2e28163e4243075</link><description>ActiveMQ 命令执行漏洞 CVE-2023-46604</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-12T08:46:55</pubDate></item><item><title>pgAdmin 远程代码执行漏洞 CVE-2024-3116</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483721&amp;idx=1&amp;sn=ba8ae21f2e3679bb151ccd16dd563114</link><description>pgAdmin 远程代码执行漏洞 CVE-2024-3116</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-11T10:13:31</pubDate></item><item><title>JumpServer 任意密码重置漏洞 CVE-2023-42820</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483705&amp;idx=1&amp;sn=c53c9e1e0dfa7562a65494c545b57de6</link><description>JumpServer 任意密码重置漏洞 CVE-2023-42820</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-10T08:50:04</pubDate></item><item><title>MinIO 集群模式信息泄露漏洞 CVE-2023-28432</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483701&amp;idx=1&amp;sn=ef9ee798586832d6f3ff104159dba2ae</link><description>MinIO 集群模式信息泄露漏洞 CVE-2023-28432</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-09T09:15:01</pubDate></item><item><title>D-Link 任意命令执行漏洞 CVE-2024-3273</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483680&amp;idx=1&amp;sn=648a37a7146b01951a57a3b44b882cf0</link><description>D-Link 任意命令执行漏洞 CVE-2024-3273</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-08T11:43:05</pubDate></item><item><title>Harbor 任意管理员注册漏洞 CVE-2019-16097</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483672&amp;idx=1&amp;sn=da7dd0ecf12094b661eded268aba5c8c</link><description>Jenkins 任意文件读取漏洞 CVE-2024-23897</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-07T12:44:10</pubDate></item><item><title>gitlab 任意用户密码重置漏洞 CVE-2023-7028</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483668&amp;idx=1&amp;sn=65aa6b85c3ac0be512f4ace3519b4acf</link><description>Jenkins 任意文件读取漏洞 CVE-2024-23897</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-06T16:02:26</pubDate></item><item><title>Jenkins 任意文件读取漏洞 CVE-2024-23897</title><link>https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&amp;mid=2247483658&amp;idx=1&amp;sn=20313363f074b4dad7964d96d53b5925</link><description>Jenkins 任意文件读取漏洞 CVE-2024-23897</description><author>巨黑科</author><category>巨黑科</category><pubDate>2024-04-05T14:47:11</pubDate></item></channel></rss>