CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

利用情报保护仅展示 PoC / EXP 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
67条匹配记录
PoCEXP绿色表示已收录,灰色表示暂无
漏洞与影响对象风险等级CVSSEPSS利用情报披露时间
CVE-2024-1708KEV
ConnectWise ScreenConnect <= 23.9.7 - Path Traversal
高危——
PoCEXP
2026/09/30
CVE-2024-57728KEV
SimpleHelp <= 5.5.7 - Arbitrary File Upload
simplehelp
高危——
PoCEXP
2026/09/30
CVE-2024-57726KEV
SimpleHelp <= 5.5.7 - Privilege Escalation
simplehelp
严重——
PoCEXP
2026/09/30
CVE-2025-26399KEV
SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE
web_help_desk
严重——
PoCEXP
2026/09/30
CVE-2026-42018KEV
JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass
高危——
PoCEXP
2026/09/30
CVE-2026-48558KEV
SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass
simplehelp
严重——
PoCEXP
2026/09/30
CVE-2026-58644KEV
Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE
Sharepoint-Server
严重——
PoCEXP
2026/09/30
CVE-2026-63077KEV
JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution
TeamCity
严重——
PoCEXP
2026/09/30
CVE-2026-34908KEV
UniFi OS - Authentication Bypass via Path Traversal (..%2f)
严重——
PoCEXP
2026/09/30
CVE-2026-1281KEV
Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
endpoint_manager_mobile
严重——
PoCEXP
2026/09/30
CVE-2026-55040KEV
Microsoft SharePoint Server - JWT Authentication Bypass
严重——
PoCEXP
2026/09/30
CVE-2026-73570KEV
Zimbra Collaboration Suite < 10.1.20 - OS Command Injection
高危——
PoCEXP
2026/09/30
CVE-2026-56290KEVRCE
Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload
Page Builder CK
严重——
PoCEXP
2026/07/28
CVE-2026-3296KEV
Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection
everest-forms
严重——
PoCEXP
2026/07/28
CVE-2026-48908KEV
Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCE
SP Page Builder
严重——
PoCEXP
2026/07/28
CVE-2026-15409KEV
SonicWall SMA1000 - Server-Side Request Forgery
SonicWall SMA
严重——
PoCEXP
2026/07/28
CVE-2026-56291KEVRCE
Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload
forms
严重——
PoCEXP
2026/07/19
CVE-2025-64328KEV
FreePBX >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection
freepbx
严重——
PoCEXP
2026/06/25
CVE-2025-14611KEV
Gladinet CentreStack & Triofox - Hardcoded Credentials
CentreStack
严重——
PoCEXP
2026/01/05
CVE-2025-58360KEV
GeoServer - XML External Entity Injection
GeoServer
严重9.8—
PoCEXP
2025/11/25
← 上一页1 / 4下一页 →