Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Security Intel Hub 83300+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254
Sources connected
135
Sources online now
626
New intel in 24h
83,300+
AI-processed intel
Continuous monitoring and AI processing Monitor intel
Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library
Examples: RCE · SSRF · GHSA · log4j
Filter
Linux Actions OwlEMAC Driver Null Pointer Dereference Crash in owl_emac_probe
git.kernel.org · 2026-10-28

根据提供的网页截图，以下是关于漏洞的关键信息总结： ### 漏洞概述 - **漏洞描述**：在 `net/ethernet/actions/owlemac.c` 文件中，`owl_emac_probe()` 函数调用 `owl_emac_phy_init()` 来连接 PHY，但在 `phydev` 被分配之前直接调用。这导致在 `phydev` 被分配之前读取 `dev->ovldev`，从而引…

Read more
Linux CIFS Client Heap Overflow in cifs_do_set_acl: Fix Analysis
git.kernel.org · 2026-10-28

### 漏洞概述 该漏洞涉及 `smb: client: fix heap overflow in cifs_do_set_acl()` 函数。当 `cifs_set_acl()` 函数尝试将 ACL（访问控制列表）写入 CIFS 服务器时，如果 ACL 数据无法完全放入缓冲区，可能会导致堆溢出。具体来说，当 `data_count` 大于 `len` 时，`cifs_set_acl()` 函数会…

Read more
Linux Kernel tracing subsystem print_graph_function logic vulnerability fix analysis
git.kernel.org · 2026-10-28

### 漏洞概述 该漏洞涉及 Linux 内核中的 `tracing` 子系统，具体是在 `print_graph_function` 函数中。当调用 `tr->current_trace_flags |= t->flags` 时，如果 `t->flags` 包含 `TRACE_GRAPH` 标志，则可能导致问题。 ### 影响范围 - **内核版本**: 2020-03-12 00:56:54 …

Read more
Linux NFS Kernel Race Condition Fix: Data Corruption Risk in nfs_setattr_size()
git.kernel.org · 2026-10-28

### 漏洞概述 - **漏洞标题**: nfs: take invalidate_lock in nfs_setattr_size() - **描述**: 该漏洞涉及在 `nfs_setattr_size()` 函数中未正确获取 `invalidate_lock`，导致在页面故障和页缓存实例化时可能引发竞争条件。这可能导致数据损坏或系统不稳定。 ### 影响范围 - **受影响组件**: NFS…

Read more
Linux CIFS Client Heap Overflow in POSIX ACL Write (CVE Analysis & Fix)
git.kernel.org · 2026-10-28

### 漏洞概述 - **漏洞名称**: CIFS 客户端堆溢出漏洞 - **漏洞描述**: 在 `cifs_do_set_acl` 函数中，当使用 POSIX ACL 写入 CIFS 时，存在堆溢出问题。该问题发生在处理较大的 CIFS 格式 ACL 时，导致缓冲区溢出。 - **影响范围**: 所有使用 CIFS 客户端并涉及 POSIX ACL 写入操作的环境。 ### 修复方案 - **修…

Read more
CIFS Filesystem Truncate Logic Flaw Causing i_size=0 Inconsistency Fix
git.kernel.org · 2026-10-28

### 漏洞概述 该漏洞涉及在 `cifs` 文件系统中，当 `cifs` 打开文件时，如果文件被截断（truncate），`cifs` 会设置 `i_size` 为 0，然后返回。这导致在 `cifs` 打开文件后，`i_size` 被设置为 0，而服务器上的文件并未被截断。 ### 影响范围 - **受影响组件**: `cifs` 文件系统 - **具体影响**: 在 `cifs` 打开文件后…

Read more
AMD amdgpu debugfs GPR Read PM Refcount Leak Fix
git.kernel.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Description**: In the `amdgpu_debugfs_gpr_read` function, when reading GPR registers, if the buffer size requested by the user exceeds 4096 bytes, it cause…

Read more
CVSS 4.3
WordPress Enable Media Replace <=4.2.2 File Upload RCE Vulnerability with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the file upload functionality in WordPress plugin "Enable Media Replace" version 4.2.2 and earlier. Attackers can exploit this vulnerability to up…

Read more
CVSS 4.3
druid-media-manager 4.2.2 Unauthenticated File Upload RCE with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects version `4.2.2` of the `druid-media-manager` plugin and involves an unauthorized file upload flaw. Attackers can exploit this vulnerability to upl…

Read more
CVSS 4.3
WordPress Media Uploader Path Traversal RCE POC Analysis
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a path traversal issue in the WordPress media upload functionality. Attackers can craft specific filenames to exploit the path processing logic w…

Read more
CVSS 4.3
mailparse-mime-parse MIME Parsing Infinite Loop DoS Vulnerability with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a critical issue in the `mailparse-mime-parse` library when processing MIME emails. Specifically, when parsing a MIME email with a specially craf…

Read more
CVSS 4.3
WordPress Enable Media Replace Plugin Unauthenticated RCE via File Upload
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects version 4.2.2 and earlier of the WordPress plugin "Enable Media Replace". It allows unauthenticated attackers to execute arbitrary code by uploadi…

Read more
CVSS 4.3
libxml2 XML Parsing DoS Vulnerability Overview and POC Code
plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述 该漏洞涉及 `libxml2` 库在处理 XML 文档时的一个安全问题。具体来说，当解析包含特定构造的 XML 文档时，`libxml2` 可能会发生内存损坏或崩溃，从而导致拒绝服务（DoS）攻击。 ### 影响范围 - **受影响版本**：`libxml2` 的多个版本，具体版本未明确列出，但通常影响较旧的版本。 - **受影响系统**：任何使用 `libxml2` 库解析 X…

Read more
CVSS 4.3
WordPress Media Uploader Path Traversal RCE Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a path traversal issue in the WordPress media upload functionality. Attackers can craft specific filenames to exploit the path handling logic wit…

Read more
CVSS 4.3
Apache mod_authz_host Host Header Bypass Vulnerability (CVE-2021-41773)
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `Require host` directive within the `mod_authz_host` module, allowing attackers to bypass hostname validation by crafting specific HTTP reque…

Read more
CVSS 6.1
Apache Tomcat FileUploadBase DoS Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `parseRequest` method in the `org.apache.tomcat.util.http.fileupload.FileUploadBase` class of Apache Tomcat. Attackers can craft specific HTT…

Read more
CVSS 6.1
echo-knowledge-base Arbitrary File Write Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述 该漏洞存在于 `echo-knowledge-base` 插件的 `admin/editor/echo-kb-frontend-editor.php` 文件中。攻击者可以通过构造特定的请求，利用该文件中的代码逻辑缺陷，实现任意文件写入。具体来说，攻击者可以控制 `$_GET['kb_post_content']` 参数，该参数被直接用于文件写入操作，从而允许攻击者将恶意内容写入到…

Read more
CVSS 6.4
EDFS RCE CVE-2019-1010072: Vulnerability Analysis and POC Code
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2019-1010072 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Product**: Extended Distributed File System (EDFS) - **Vulnerab…

Read more
CVSS 6.4
Apache Solr RCE (CVE-2019-1010023): POC and Exploit Analysis for Solr 8.0-8.6
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2019-1010023 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Component**: Apache Solr - **Vulnerability Description**: A vul…

Read more
CVSS 6.4
Awesome Support File Upload RCE CVE-2024-4664 Analysis and Fix
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: CVE-2024-4664 - **Vulnerability Type**: File Upload Vulnerability - **Affected Plugin**: Awesome Support - **Affected Versions**: 6.0.0 and earlier -…

Read more

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.