VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
Samsung WLAN AP WEA453e - Remote Code Execution SAMSUNG-AP	远程代码执行	严重	10.0	—	PoC	2023/10/20
Samsung WLAN AP WEA453e - Local File Inclusion SAMSUNG-AP	跨站脚本攻击	高危	8.6	—	PoC	2023/10/20
RG-UAC Ruijie - Password Hashes Leak RG-UAC	信息泄露	高危	—	—	PoC	2023/10/20
Ruijie Networks Switch eWeb S29_RGOS 11.4 - Local File Inclusion ruijie-eweb网管系统	文件包含	高危	7.5	—	PoC	2023/10/20
Royal Event Management System - Stored Cross-Site Scripting royal_elementor_addons	跨站脚本攻击	高危	7.2	—	PoC	2023/10/20
RocketChat Live Chat - Unauthenticated Read Access Rocket Chat	未授权访问	高危	8.6	—	PoC	2023/10/20
Ruby on Rails - CRLF Injection and Cross-Site Scripting Ruby-on-Rails	跨站脚本攻击	中危	—	—	PoC	2023/10/20
Zimbra Collaboration Suite - Server-Side Request Forgery zimbra	服务端请求伪造	严重	9.8	—	PoC	2023/10/20
ZCMS - SQL Injection 凡诺企业网站管理系统ASP收费版	SQL注入	严重	10.0	—	PoC	2023/10/20
YesWiki <2022-07-07 - Cross-Site Scripting yeswiki	跨站脚本攻击	中危	6.5	—	PoC	2023/10/20
YesWiki <2022-07-07 - SQL Injection yeswiki	SQL注入	严重	10.0	—	PoC	2023/10/20
RCE Apache Hadoop YARN ResourceManager - Remote Code Execution	远程代码执行	低危	—	—	PoC	2023/10/20
XdCMS - SQL Injection xdcms	SQL注入	严重	10.0	—	PoC	2023/10/20
WSO2 <5.8.0 - Server Side Request Forgery WSO2-Management-Console	服务端请求伪造	中危	6.8	—	PoC	2023/10/20
WEMS Enterprise Manager - Cross-Site Scripting wems_manager	跨站脚本攻击	高危	7.2	—	PoC	2023/10/20
viewLinc 5.1.2.367 - Carriage Return Line Feed Attack	CRLF注入	低危	—	—	PoC	2023/10/20
Vanguard Marketplace CMS 2.1 - Cross-Site Scripting vanguard_post	跨站脚本攻击	高危	7.2	—	PoC	2023/10/20
RCE Unauthenticated Spark REST API Spark	未授权访问	严重	10.0	—	PoC	2023/10/20
RCE UEditor - Arbitrary File Upload UEditor	文件上传	高危	8.8	—	PoC	2023/10/20
RCE Twig PHP <2.4.4 template engine - SSTI twig	模板注入	高危	—	—	PoC	2023/10/20