VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
Expect-CT Header - Misconfigured	安全配置错误	低危	—	—	PoC	2025/12/18
Kafka Operation API - Cluster kafka-ui Kafka kafka_connect	未授权访问	高危	—	—	PoC	2025/12/18
Blackbox Exporter - Exposure Blackbox Exporter	未授权访问	高危	—	—	PoC	2025/12/18
Content-Security-Policy "script-src" Wildcard Detected	安全配置错误	低危	—	—	PoC	2025/12/18
RCE Open WebUI - Default Login openwebui	安全配置错误	严重	—	—	PoC	2025/12/18
Redis Commander - Default Login Redis Commander	安全配置错误	高危	—	—	PoC	2025/12/18
Vtiger CRM - Default Login vtiger_crm	安全配置错误	高危	—	—	PoC	2025/12/18
Traggo - Default Login Traggo	安全配置错误	高危	—	—	PoC	2025/12/18
CVE-2017-17092 WordPress < 4.9.1 - Authenticated JavaScript File Upload wordpress	跨站脚本攻击	中危	—	3.5%	PoC	2025/12/18
CVE-2017-14725 WordPress < 4.8.2 - Authenticated Open Redirect wordpress	开放重定向	中危	—	1.9%	PoC	2025/12/18
CVE-2017-5983RCE JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE) jira	远程代码执行	严重	—	16.2%	PoC	2025/12/18
CVE-2024-9161 Rank Math SEO < 1.0.229 - Unauthenticated User and Term Metadata Insert/Update/Deletion seo	访问控制错误	中危	—	2.1%	PoC	2025/12/18
CVE-2024-39646 WordPress Custom 404 Pro <= 3.11.1 - Reflected XSS custom_404_pro	跨站脚本攻击	高危	—	0.62%	PoC	2025/12/18
CVE-2025-49706 Microsoft SharePoint Server - Authentication Bypass Sharepoint-Server	身份验证绕过	高危	—	99.1%	PoC	2025/12/18
CVE-2025-51586 PrestaShop - Information Disclosure PrestaShop	信息泄露	高危	—	0.82%	PoC	2025/12/18
CVE-2025-13315 Twonky Server 8.5.2 on Linux and Windows - Log File Exposure TwonkyServer	信息泄露	高危	—	32.3%	PoC	2025/12/18
CVE-2021-35042 Django QuerySet.order_by - SQL Injection Django	SQL注入	严重	—	44.4%	PoC	2025/12/18
WordPress Database Backup File - Exposure wordpress	信息泄露	高危	—	—	PoC	2025/12/18
Shopify Shared Secret	信息泄露	低危	—	—	PoC	2025/12/18
Ambassador API Gateway Diagnostics - Exposure Ambassador	信息泄露	低危	—	—	PoC	2025/12/18