VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2025-63387 Dify v1.9.1 - Broken Access Control dify	访问控制错误	高危	7.5	29.9%	PoC	2025/12/18
WordPress All-in-One Security <=4.4.1 - Hidden Login Page Exposure wordpress	信息泄露	中危	—	—	PoC	2025/12/18
Caldera Forms <= 1.5.4 - Cross-Site Scripting Caldera Forms	跨站脚本攻击	中危	—	—	PoC	2025/12/18
WordPress BuddyPress < 2.9.2 - Authenticated Open Redirect	开放重定向	低危	—	—	PoC	2025/12/18
WordPress Solid Security < 9.0.1 - Unauthenticated Login Page Disclosure better-wp-security	信息泄露	中危	—	—	PoC	2025/12/18
Yonyou U9 PatchFile.asmx - Unauthenticated Arbitrary File Upload yonyou-U9	远程代码执行	严重	—	—	PoC	2025/12/18
functions.php Full Path Disclosure	信息泄露	低危	—	—	PoC	2025/12/18
Deprecated Feature-Policy Header - Detection	信息泄露	低危	—	—	PoC	2025/12/18
Secrets Patterns (PII)	信息泄露	低危	—	—	PoC	2025/12/18
Microsoft SharePoint - Master Page Disclosure	信息泄露	低危	—	—	PoC	2025/12/18
Microsoft SharePoint - Site Metadata Disclosure	信息泄露	低危	—	—	PoC	2025/12/18
Microsoft SharePoint - Layouts Disclosure	信息泄露	低危	—	—	PoC	2025/12/18
Microsoft SharePoint Files Disclosure	信息泄露	低危	—	—	PoC	2025/12/18
Microsoft SharePoint - Site Pages Disclosure	信息泄露	低危	—	—	PoC	2025/12/18
Nginx Status Page - 403 Bypass	访问控制错误	低危	—	—	PoC	2025/12/18
Adobe Experience Manager (AEM) - Anonymous JCR Node Creation Adobe-Experience-Manager	安全逻辑漏洞	高危	—	—	PoC	2025/12/18
WordPress Plugin GDPR Cookie Consent - Full Path Disclosure	信息泄露	低危	—	—	PoC	2025/12/18
WordPress Members / Membership & User Role Editor Plugin - Error Log Disclosure	信息泄露	低危	—	—	PoC	2025/12/18
WordPress CMB2 - Full Path Disclosure	信息泄露	低危	—	—	PoC	2025/12/18
WordPress WP Maintenance Mode - Full Path Disclosure	信息泄露	低危	—	—	PoC	2025/12/18