Updated by Github Bot

EXP-Tools · Jan 14, 2025 · 1d5ddfa · 1d5ddfa
1 parent d37163a
commit 1d5ddfa
Show file tree

Hide file tree

Showing 3 changed files with 91 additions and 81 deletions.
diff --git a/cache/Tenable (Nessus).dat b/cache/Tenable (Nessus).dat
@@ -189,3 +189,13 @@ d0793ed7267a9c5ed4c6e57e17ad616f
 ac737a04e97484577f1b984868302e58
 936994ae62893114d153ed9a236d34c9
 501c0fdc5c798076d0a715769d66a278
+e94c87f8335f9897060ae76c6c75733e
+8f9de32f50270320f7fd685e9710468b
+a6ee9f455c903af316f7dd775052edd1
+e5cf6f8b748ddf999ba4cb099cbc2c0e
+cfe653de65cfedbc22787dcd57d81295
+77938c8776326d4d76bb820ff6e59775
+602a0ebcb988c0ed7059c804a9c18b39
+500111c2de1b2f8e1099fdab77e6da46
+2492e820a751fb1ec6ca073f97c71b97
+7c006ad7e5240a93cba10442b66a54c8
diff --git a/data/cves.db b/data/cves.db
diff --git a/docs/index.html b/docs/index.html
@@ -1,4 +1,4 @@
-<!-- RELEASE TIME : 2025-01-14 12:43:06 -->
+<!-- RELEASE TIME : 2025-01-14 15:24:31 -->
 <html lang="zh-cn">
 
  <head>
@@ -283,6 +283,86 @@ <h2><a href="https://exp-blog.com" target="_blank">眈眈探求</a> | <a href="h
        <th width="43%">TITLE</th>
        <th width="5%">URL</th>
       </tr>
+      <tr>
+       <td>e94c87f8335f9897060ae76c6c75733e</td>
+       <td>CVE-2024-56841</td>
+       <td>2025-01-14 11:15:17 <img src="imgs/new.gif" /></td>
+       <td>A vulnerability has been identified in Mendix LDAP (All versions < V1.1.2). Affected versions of the module are vulnerable to LDAP injection. This could allow an unauthenticated remote attacker to bypass username verification.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-56841">详情</a></td>
+      </tr>
+
+      <tr>
+       <td>8f9de32f50270320f7fd685e9710468b</td>
+       <td>CVE-2024-53649</td>
+       <td>2025-01-14 11:15:16 <img src="imgs/new.gif" /></td>
+       <td>A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SA82 (CP150) (All versions < V9.80), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SD82 (CP150) (All versions < V9.80), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ81 (CP100) (All versions >= V7.80), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SK82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SK82 (CP150) (All versions < V9.80), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SL82 (CP150) (All versions < V9.80), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7ST85 (CP300) (All versions), SIPROTEC 5 7ST86 (CP300) (All versions < V9.80), SIPROTEC 5 7SX82 (CP150) (All versions < V9.80), SIPROTEC 5 7SX85 (CP300) (All versions < V9.80), SIPROTEC 5 7SY82 (CP150) (All versions < V9.80), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT82 (CP100) (All versions >= V7.80), SIPROTEC 5 7UT82 (CP150) (All versions < V9.80), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VU85 (CP300) (All versions < V9.80), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.80). Affected devices do not properly limit the path accessible via their webserver. This could allow an authenticated remote attacker to read arbitrary files from the filesystem of affected devices.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-53649">详情</a></td>
+      </tr>
+
+      <tr>
+       <td>a6ee9f455c903af316f7dd775052edd1</td>
+       <td>CVE-2024-47100</td>
+       <td>2025-01-14 11:15:16 <img src="imgs/new.gif" /></td>
+       <td>A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0), SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0), SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0), SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0), SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0). The web interface of the affected devices is vulnerable to Cross-Site Request Forgery (CSRF) attacks. This could allow an unauthenticated attacker to change the CPU mode by tricking a legitimate and authenticated user with sufficient permissions on the target CPU to click on a malicious link.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-47100">详情</a></td>
+      </tr>
+
+      <tr>
+       <td>e5cf6f8b748ddf999ba4cb099cbc2c0e</td>
+       <td>CVE-2024-45385</td>
+       <td>2025-01-14 11:15:15 <img src="imgs/new.gif" /></td>
+       <td>A vulnerability has been identified in Industrial Edge Management OS (IEM-OS) (All versions). Affected components are vulnerable to reflected cross-site scripting (XSS) attacks. This could allow an attacker to extract sensitive information by tricking users into accessing a malicious link.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-45385">详情</a></td>
+      </tr>
+
+      <tr>
+       <td>cfe653de65cfedbc22787dcd57d81295</td>
+       <td>CVE-2024-12240</td>
+       <td>2025-01-14 11:15:15 <img src="imgs/new.gif" /></td>
+       <td>The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the row label parameter in all versions up to, and including, 2.31.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-12240">详情</a></td>
+      </tr>
+
+      <tr>
+       <td>77938c8776326d4d76bb820ff6e59775</td>
+       <td>CVE-2025-20620</td>
+       <td>2025-01-14 10:15:07 <img src="imgs/new.gif" /></td>
+       <td>SQL Injection vulnerability exists in STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected product may obtain the administrative password of the web management page.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2025-20620">详情</a></td>
+      </tr>
+
+      <tr>
+       <td>602a0ebcb988c0ed7059c804a9c18b39</td>
+       <td>CVE-2025-20055</td>
+       <td>2025-01-14 10:15:07 <img src="imgs/new.gif" /></td>
+       <td>OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected product may execute an arbitrary OS command.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2025-20055">详情</a></td>
+      </tr>
+
+      <tr>
+       <td>500111c2de1b2f8e1099fdab77e6da46</td>
+       <td>CVE-2025-20016</td>
+       <td>2025-01-14 10:15:07 <img src="imgs/new.gif" /></td>
+       <td>OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340/D440 provided by Y'S corporation. A user with an administrative privilege who logged in to the web management page of the affected product may execute an arbitrary OS command.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2025-20016">详情</a></td>
+      </tr>
+
+      <tr>
+       <td>2492e820a751fb1ec6ca073f97c71b97</td>
+       <td>CVE-2024-12919</td>
+       <td>2025-01-14 10:15:07 <img src="imgs/new.gif" /></td>
+       <td>The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.13.7. This is due to the pms_pb_payment_redirect_link function using the user-controlled value supplied via the 'pms_payment_id' parameter to authenticate users without any further identity validation. This makes it possible for unauthenticated attackers with knowledge of a valid payment ID to log in as any user who has made a purchase on the targeted site.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-12919">详情</a></td>
+      </tr>
+
+      <tr>
+       <td>7c006ad7e5240a93cba10442b66a54c8</td>
+       <td>CVE-2025-0394</td>
+       <td>2025-01-14 09:15:21 <img src="imgs/new.gif" /></td>
+       <td>The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gh_big_file_upload() function in all versions up to, and including, 3.7.3.5. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.</td>
+       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2025-0394">详情</a></td>
+      </tr>
+
       <tr>
        <td>9066fc19f9ab09983470e5ca1bbbe50d</td>
        <td>CVE-2024-52938</td>
@@ -443,86 +523,6 @@ <h2><a href="https://exp-blog.com" target="_blank">眈眈探求</a> | <a href="h
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-57880">详情</a></td>
       </tr>
 
-      <tr>
-       <td>1f3bf47ad6802bea703dc8b48f6f6386</td>
-       <td>CVE-2025-0391</td>
-       <td>2025-01-11 09:15:05</td>
-       <td>A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This issue affects the function saveOrUpdate of the file org/jeecgframework/web/cgform/controller/build/CgFormBuildController. java. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 20250101 is able to address this issue. It is recommended to upgrade the affected component.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2025-0391">详情</a></td>
-      </tr>
-
-      <tr>
-       <td>2af6798bb8809c92340044fc9750c765</td>
-       <td>CVE-2025-0390</td>
-       <td>2025-01-11 08:15:26</td>
-       <td>A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This vulnerability affects unknown code of the file /wmOmNoticeHController.do. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 20250101 is able to address this issue. It is recommended to upgrade the affected component.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2025-0390">详情</a></td>
-      </tr>
-
-      <tr>
-       <td>00d0a6bb17ca0fed377f526acae1885e</td>
-       <td>CVE-2024-42175</td>
-       <td>2025-01-11 08:15:26</td>
-       <td>HCL MyXalytics is affected by a weak input validation vulnerability. The application accepts special characters and there is no length validation. This can lead to security vulnerabilities like SQL injection, XSS, and buffer overflow.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-42175">详情</a></td>
-      </tr>
-
-      <tr>
-       <td>73384de32b34cde5b4ecd0af1d277e88</td>
-       <td>CVE-2024-12877</td>
-       <td>2025-01-11 08:15:26</td>
-       <td>The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via deserialization of untrusted input from the donation form like 'firstName'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server that makes remote code execution possible. Please note this was only partially patched in 3.19.3, a fully sufficient patch was not released until 3.19.4. However, another CVE was assigned by another CNA for version 3.19.3 so we will leave this as affecting 3.19.2 and before. We have recommended the vendor use JSON encoding to prevent any further deserialization vulnerabilities from being present.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-12877">详情</a></td>
-      </tr>
-
-      <tr>
-       <td>168ccecef81623b2353929a9ecd89415</td>
-       <td>CVE-2024-12527</td>
-       <td>2025-01-11 08:15:25</td>
-       <td>The Perfect Portal Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'perfect_portal_intake_form' shortcode in all versions up to, and including, 3.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-12527">详情</a></td>
-      </tr>
-
-      <tr>
-       <td>855ee6de0fa1b70b8c6ac2357d3b68f4</td>
-       <td>CVE-2024-12520</td>
-       <td>2025-01-11 08:15:25</td>
-       <td>The Dominion – Domain Checker for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dominion_shortcodes_domain_search_6' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-12520">详情</a></td>
-      </tr>
-
-      <tr>
-       <td>cf5bacf4cd6f67ab826180357d7d0737</td>
-       <td>CVE-2024-12519</td>
-       <td>2025-01-11 08:15:25</td>
-       <td>The TCBD Auto Refresher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbd_auto_refresh' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-12519">详情</a></td>
-      </tr>
-
-      <tr>
-       <td>c450d07f808787e40f3ea50d569994d4</td>
-       <td>CVE-2024-12412</td>
-       <td>2025-01-11 08:15:25</td>
-       <td>The Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘active_tab’ parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-12412">详情</a></td>
-      </tr>
-
-      <tr>
-       <td>d41569d00c4ba7adc687e7d15f91f2d0</td>
-       <td>CVE-2024-12407</td>
-       <td>2025-01-11 08:15:25</td>
-       <td>The Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pushnotificationid' parameter in all versions up to, and including, 2.06 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-12407">详情</a></td>
-      </tr>
-
-      <tr>
-       <td>44a15a609969c45fa1c11af597029f00</td>
-       <td>CVE-2024-12116</td>
-       <td>2025-01-11 08:15:24</td>
-       <td>The Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.1 via the 'uta-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.</td>
-       <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-12116">详情</a></td>
-      </tr>
-
      </tbody>
     </table>
    </div>