组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| GL.iNet <= 4.3.7 - Arbitrary File Write | 文件上传 | 高危 | 7.5 | 47.0% | PoC | ||
| LiveGBS user/save - Logical Flaw | 安全逻辑漏洞 | 高危 | — | — | PoC | ||
| TOTOLINK A3700R - Command Injection | 远程代码执行 | 严重 | 9.8 | 65.4% | PoC | ||
| Zapier Webhook Disclosure | 信息泄露 | 低危 | — | — | PoC | ||
| SuperWebMailer - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 1.1% | PoC | ||
| ServiceNow Widget-Simple-List - Misconfiguration | 安全配置错误 | 未知 | — | — | PoC | ||
RCE UFIDA NC uapjs - RCE vulnerability | 远程代码执行 | 严重 | — | — | PoC | ||
| Wavlink Panel - Unauthenticated Access | 信息泄露 | 高危 | — | — | PoC | ||
| ntop Network Traffix Exposed | 信息泄露 | 未知 | — | — | PoC | ||
| Glances Unauthenticated Panel | 信息泄露 | 低危 | — | — | PoC | ||
| Cloudinary Credentials Disclosure | 信息泄露 | 低危 | — | — | PoC | ||
| Cloudflare External Image Resizing Misconfiguration | 安全配置错误 | 低危 | — | — | PoC | ||
| Jenkins panel async-people | 未分类 | 低危 | — | — | PoC | ||
RCE NETSurveillance WEB Default Login | 弱口令 | 高危 | — | — | PoC | ||
| Weak Cipher Suites Detection | 安全配置错误 | 低危 | — | — | PoC | ||
| Deadbolt Ransomware Detection | 未分类 | 低危 | — | — | PoC | ||
| Detect Jenkins in Debug Mode with Stack Traces Enabled | 信息泄露 | 低危 | — | — | PoC | ||
| Detect Springboot Trace Actuator | 信息泄露 | 低危 | — | — | PoC | ||
| Detect Springboot Thread Dump page | 信息泄露 | 低危 | — | — | PoC | ||
| Detect Springboot metrics Actuator | 信息泄露 | 低危 | — | — | PoC |