组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| Tiki Wiki CMS Groupware v25.0 - Cross Site Scripting | 跨站脚本攻击 | 中危 | — | — | PoC | ||
| Jorani v1.0.3-2014-2023 Benjamin BALET - Cross-Site Scripting | 跨站脚本攻击 | 中危 | — | — | PoC | ||
| Zabbix Installation Exposure | 信息泄露 | 高危 | — | — | PoC | ||
| Gibbon Installer - Exposure | 信息泄露 | 高危 | — | — | PoC | ||
| Drupal User Enumration [Ajax] | 信息泄露 | 低危 | — | — | PoC | ||
| Mlflow - Unauthenticated Access | 未授权访问 | 高危 | — | — | PoC | ||
| GenieACS - Authentication Bypass (Default JWT Secret) | 身份验证绕过 | 高危 | — | — | PoC | ||
| File Browser Dashboard - Unauthenticated Access | 未授权访问 | 中危 | — | — | PoC | ||
| CoreBos - .htaccess File Exposure | 信息泄露 | 低危 | — | — | PoC | ||
| Microsoft Azure Web App - Error 404 | 未分类 | 低危 | — | — | PoC | ||
| X-Forwarded-For 403-forbidden bypass | 访问控制错误 | 低危 | — | — | PoC | ||
| WordPress - Weak Credentials | 安全配置错误 | 严重 | 9.3 | — | PoC | ||
| Prestashop Modules Enumeration | 未分类 | 低危 | — | — | PoC | ||
| Linux - Local File Inclusion Fuzzing | 文件包含 | 高危 | 7.5 | — | PoC | ||
RCE Header - Remote Command Injection | 远程代码执行 | 严重 | 10.0 | — | PoC | ||
| Cache Poison Fuzzing | 未分类 | 低危 | — | — | PoC | ||
| Milesight Industrial Cellular Routers - Information Disclosure | 信息泄露 | 高危 | — | — | PoC | ||
| WordPress Readme File | 信息泄露 | 低危 | — | — | PoC | ||
| Drupal Install | 信息泄露 | 低危 | — | — | PoC | ||
RCE Adiscon LogAnalyzer - Information Disclosure | 信息泄露 | 高危 | 7.5 | — | PoC |