577 matches found
CVE-2025-7803
The CVE-2025-7803 entry pertains to descreekert wx-discuz, affecting the file /wx.php in the validToken function. The issue arises from manipulating the echostr parameter, enabling cross-site scripting (XSS). Attacks are described as possible to be initiated remotely and the vendor uses rolling r...
wx-discuz 代码注入漏洞
wx-discuz is descreekert individual developer of a microsoft public docking discuz forum software. Code injection vulnerability exists in wx-discuz 12bd4745c63ec203cb32119bf77ead4a923bf277 and previous versions, which stems from a cross-site scripting attack due to incorrect operation of the...
PT-2025-30090 · Wx-Discuz · Wx-Discuz
Name of the Vulnerable Software and Affected Versions: descreekert wx-discuz versions prior to 12bd4745c63ec203cb32119bf77ead4a923bf277 Description: A vulnerability exists in the validToken function of the /wx.php file. Manipulation of the echostr argument can lead to cross-site scripting. The...
CVE-2024-30884
Reflected Cross-Site Scripting XSS vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component...
CVE-2018-5377
Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter...
CVE-2024-30884
Reflected Cross-Site Scripting XSS vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component...
CVE-2024-30884
Reflected Cross-Site Scripting XSS vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component...
PT-2024-23656 · Discuzx · Discuzx
Name of the Vulnerable Software and Affected Versions: Discuz! version X3.4 20220811 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability, which allows remote attackers to execute arbitrary code and obtain sensitive information. This is achieved via a crafted payload to th...
Discuz! 安全漏洞
Cansheng Xintron Technology Discuz! is a community forum system based on PHP and MySQL by China's Cansheng Xintron Technology Company. A security vulnerability exists in Discuz! X3.4 version 20220811, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that allows...
CVE-2024-30884
Reflected Cross-Site Scripting XSS vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component...
CVE-2024-30884
Reflected Cross-Site Scripting XSS vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component...
Discuz! X 跨站脚本漏洞
Discuz! X is a forum platform. A cross-site scripting vulnerability exists in version 3.4-20200818 and prior versions of Discuz! X. The vulnerability stems from the fact that incorrect manipulation of the uchidden parameter can lead to cross-site scripting...
CVE-2023-49759
Cross-Site Request Forgery CSRF vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.3.0...
Discuz! 跨站脚本漏洞
Cansheng Xinchuang Technology Discuz! is a community forum system based on PHP and MySQL by Cansheng Xinchuang Technology Company in China. A security vulnerability exists in Discuz! X version 3.4, which stems from the presence of a cross-site scripting XSS vulnerability that can be exploited by ...
SQL Injection Vulnerability in Discuz!
Discuz! is a general-purpose community forum software system. A SQL injection vulnerability exists in Discuz! An attacker can exploit the vulnerability to obtain sensitive information from the database...
Shenzhen Tencent Computer System Co., Ltd Discuz! information leakage vulnerability
Crossday Discuz! Board Forum System referred to as Discuz! Forum is an efficient forum solution built with PHP and MySQL/Pgsql and many other databases. An information leakage vulnerability exists in Shenzhen Tencent Computer Systems Limited Discuz! An attacker can exploit this vulnerability to...
Arbitrary file deletion vulnerability in the background of Beijing Kangsheng Xinchuang Technology Co.
Discuz! is a general community forum software system launched by Beijing Kangsheng Xinchuang Technology Co. Discuz! x3.4 backend has an arbitrary file deletion vulnerability that can be exploited by an attacker to construct a packet to delete arbitrary files, possibly enabling reinstallation...
msf_module
msf-module wooyun还在的时候根据别人的审计写的一些msf插件，有几个还是挺好用的 module列表 auxiliary + zoomeye-search.rb exploits + Dswjcms-upload-wooyun-2015-0160899.rb + Lotapp-exec-wooyun-2015-0133750.rb + OEM-exec-wooyun-2010-0192732.rb + ZTE-exec-wooyun-2016-190343.rb + discuz-ssrf-wooyun-2011-0151179.rb +...
poc
This is a collection of proof-of-concept PoC exploits for various vulnerabilities, primarily targeting web applications. The PoCs are written in Python and utilize the Beebeeto framework. Here's a summary of the PoCs: 1. Discuz x3.0 /static/image/common/focus.swf Cross Site Scripting XSS POC: Thi...