VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

利用情报保护仅展示 PoC / EXP 是否收录不公开内容、路径和下载地址

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
arangodb_auth_bypass ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCE	严重	—	—	PoCEXP	2026/09/30
wordpress_click2shell WordPress Click2Shell Theme Preview Selector Injection wordpress	高危	—	—	PoCEXP	2026/09/30
simple_file_list_rce WordPress Simple File List <=4.2.2 - Remote Code Execution	严重	—	—	PoCEXP	2026/09/30
ibm_websphere_ssrf IBM WebSphere HCL Digital Experience - Server-Side Request Forgery	高危	—	—	PoCEXP	2026/09/30
afterlogic_path_disclosure AfterLogic Aurora and WebMail Pro < 7.7.9 - Full Path Disclosure	低危	—	—	PoCEXP	2026/09/30
bentoml_open_redirect BentoML v1.3.9 - Open Redirect	中危	—	—	PoCEXP	2026/09/30
vicidial_info_disclosure VICIdial Sensitive Information Disclosure	高危	—	—	PoCEXP	2026/09/30
solarview_compact_pow_xss SolarView Compact 6.00 - 'pow' Cross-Site Scripting	高危	—	—	PoCEXP	2026/09/30
harman_media_suite_lfi Harman Media Suite <= 4.2.0 - Local File Disclosure	高危	—	—	PoCEXP	2026/09/30
CVE-2021-28073 Ntopng Authentication Bypass	严重	—	—	PoCEXP	2026/09/30
caseaware_xss CaseAware a360inc - Cross-Site Scripting	中危	—	—	PoCEXP	2026/09/30
CVE-2018-11714 TP-LINK WR840N v6 up to 0.9.1 4.16 - Improper Authentication	严重	—	—	PoCEXP	2026/09/30
solarview_compact_time_begin_xss SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting	中危	—	—	PoCEXP	2026/09/30
temenos_transact_xss Temenos Transact - Cross-Site Scripting	高危	—	—	PoCEXP	2026/09/30
monitorr_file_upload Monitorr Services Configuration - Arbitrary File Upload monitorr	高危	—	—	PoCEXP	2026/09/30
gestsup_account_takeover GestSup - Account Takeover gestsup	严重	—	—	PoCEXP	2026/09/30
una_cms_rce UNA CMS <= 14.0.0-RC4 - PHP Object Injection	严重	—	—	PoCEXP	2026/09/30
odoo_xss Odoo - Cross-Site Scripting Odoo	中危	—	—	PoCEXP	2026/09/30
nodogsplash_lfi Nodogsplash - Directory Traversal	高危	—	—	PoCEXP	2026/09/30
CVE-2018-14839 LG NAS Devices - Remote Code Execution	严重	—	—	PoCEXP	2026/09/30