Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtryTripster <= 1.0.10 - Unauthenticated Local File Inclusion
Captcha.eu <= 1.0.61 - Unauthenticated Server-Side Request Forgery
Winger <= 1.0.16 - Unauthenticated Local File Inclusion
Pubzinne <= 1.0.12 - Unauthenticated Local File Inclusion
Agricola <= 1.1.0 - Unauthenticated Local File Inclusion
Fabric <= 1.5.0 - Unauthenticated Local File Inclusion
Funnel Builder by FunnelKit <= 3.11.1 - Unauthenticated Local File Inclusion
Fabrica <= 1.8.1 - Unauthenticated Local File Inclusion
Rare Radio <= 1.0.15.1 - Unauthenticated Local File Inclusion
Compress Then Upload <= 1.0.4 - Authenticated (Admin+) Arbitrary File Upload
Kicker <= 2.2.0 - Unauthenticated Local File Inclusion
Basil <= 1.3.12 - Unauthenticated Local File Inclusion
Soleil <= 1.17 - Unauthenticated Local File Inclusion
Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion
Ditty <= 3.1.57 - Unauthenticated Server-Side Request Forgery
Filr <= 1.2.10 - Authenticated (Contributor+) Arbitrary File Deletion
ServerBuddy by PluginBuddy.com <= 1.0.5 - Cross-Site Request Forgery to PHP Object Injection
BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
Woocommerce Blocks – Woolook <= 1.7.0 - Authenticated (Admin+) Local File Inclusion
Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.