CloudMap
漏洞情报库
漏洞库
厂商
产品
风险排行
开发者中心
开始检索
↗
VULNERABILITY INTELLIGENCE
漏洞情报库
组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
利用情报保护
仅展示 PoC / EXP 是否收录
不公开内容、路径和下载地址
⌕
/
搜索漏洞
3,060
条匹配记录
PoC
EXP
绿色表示已收录,灰色表示暂无
漏洞与影响对象
风险等级
CVSS
EPSS
利用情报
披露时间
CVE-2025-48157
WordPress Formality Plugin <= 1.5.9 - Local File Inclusion
Formality
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2025-64328
KEV
FreePBX >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection
freepbx
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2025-62168
Squid Proxy - HTTP Authentication Credentials Disclosure
Squid
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2025-32778
Web-Check < 2.0.1 Screenshot API - OS Command Injection
web-check
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2025-34030
RCE
sar2html <=3.2.2 Plot Parameter - Remote Code Execution
sar2html
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2025-59528
RCE
Flowise - Remote Code Execution
Flowise
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2022-44727
PrestaShop lgcookieslaw - SQL Injection
PrestaShop
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-8054
dotCMS Core Publish Audit API - Unauthenticated SQL Injection
DotCMS
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-9082
Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query
Drupal
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-41176
Rclone RC - Broken Access Control
Rclone
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-21445
Langflow - Broken Access Control
Langflow
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-46725
TYPO3 ceselector Extension - Insecure Deserialization
typo3
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-5073
WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection
armember
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-33340
LoLLMs WEBUI - Server-Side Request Forgery
LOLLMS WebUI
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-31816
Budibase - Authentication Bypass
Budibase
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-21643
Fortinet FortiClientEMS 7.4.4 - SQL Injection
FortiClientEMS
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-0740
Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload
Ninja Forms File Uploads
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-4631
Cockpit Web Console < 360 - Remote Code Execution
Cockpit
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-0926
Prodigy Commerce <= 3.3.0 - Local File Inclusion
Prodigy Commerce
严重
—
—
PoC
EXP
2026/06/25
⌄
CVE-2026-46364
phpMyFAQ <= 4.1.1 - SQL Injection
phpMyFAQ
严重
—
—
PoC
EXP
2026/06/25
⌄
← 上一页
10 / 153
下一页 →