Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

Security Intel Hub 83334+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254

Sources connected

135

Sources online now

582

New intel in 24h

83,334+

AI-processed intel

Continuous monitoring and AI processing Monitor intel

Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library

Filter

KEV only

Verified PoC

CVSS 7.2

Samba smbd RCE Vulnerability CVE-2017-12629 Analysis and POC Code

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `sapphire.php` file within the `sapphire-theme` plugin, specifically at line 142. Attackers can trigger a file inclusion vulnerability by craf…

CVSS 7.2

CVE-2021-41272: WP-PostViews Plugin RCE via File Inclusion with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2021-41078 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Component**: `libxml2` library - **Vulnerability Description**: A…

CVSS 7.2

Sapphire-Theme Plugin SQL Injection Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `sapphire.php` file within the `sapphire-theme` plugin, specifically located at line 1472. The vulnerability type is **SQL Injection**, allow…

CVSS 7.2

svelte-preprocess CVE-2019-14221 RCE Analysis and POC Code

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2021-41079 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Component**: WordPress Plugin "WP-PostViews" - **Vulnerability De…

CVSS 7.2

Bohemnes Prime Slider LFI Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: Arbitrary File Read Vulnerability - **Vulnerability Description**: An arbitrary file read vulnerability exists in the `class-gui.php` file of the `…

CVSS 7.2

billionaire Go Package Integer Overflow (CWE-190) Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `billionaire` module within the `billionaire` package, specifically the `billionaire` function. A security flaw exists in how this function ha…

CVSS 4.4

WP Book Plugin SQL Injection Vulnerability Analysis with POC and Exploit Code

plugins.trac.wordpress.org · 2026-10-28

# Vulnerability Summary ## Vulnerability Overview - **Vulnerability Type**: SQL Injection - **Vulnerability Location**: `block_manager()` function in the `class-block-manager.php` file - **Vulnerabili…

CVSS 4.3

Piglet Directory Arbitrary File Upload Leading to RCE: Analysis and Mitigation

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `admin.php` file of the `Piglet Directory` plugin, specifically within the `page` parameter handling logic. Attackers can craft specific URL…

CVSS 4.3

boding-manager admin.php SQL Injection Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `admin` page of the `boring-manger` plugin, specifically the file `admin.php`. A SQL injection vulnerability exists in `admin.php`, allowing a…

CVSS 4.3

Tour Booking Manager Unauth File Include Vuln Analysis & POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Type**: Unauthorized File Inclusion Vulnerability - **Affected Plugin**: Tour Booking Manager - **Vulnerability Description**: This vulnerability allows un…

CVSS 6.4

If So Dynamic Content <1.10.2 Authenticated Stored XSS (CVE-2024-19344) Advisory

www.wordfence.com · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: If So Dynamic Content < 1.10.2 - Authenticated (Contributor) Stored Cross-Site Scripting via 'repeater' Parameter - **CVE ID**: CVE-2024-19344 - **…

CVSS 6.4

PalmOS PHP 1.0.2 SQL Injection Vulnerability Analysis and Exploitation POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `palmos-class-of-palmos.php` file and involves the implementation of multiple functions and classes. The primary issues include: 1. **Unvali…

CVSS 4.9

libxml2 Null Pointer Dereference DoS Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a recursive parsing issue in the `libxml2` library when handling XML entities, leading to Denial of Service (DoS) attacks. Attackers can craft ma…

CVSS 6.4

Apache Struts2 S2-045 RCE Vulnerability Analysis and POC

www.wordfence.com · 2026-10-28

根据提供的网页截图，以下是关于漏洞的关键信息总结： ### 漏洞概述 - **漏洞名称**: Apache Struts2 S2-045 - **漏洞描述**: 该漏洞允许攻击者通过构造特定的HTTP请求，在目标服务器上执行任意命令。 - **严重性**: 高（CVSS评分为9.8） ### 影响范围 - **受影响版本**: Apache Struts 2.3.x 和 2.5.x 系列的部分版本…

CVSS 4.9

Unauthorized Access Vulnerability: POC Code and Fix Details

github.com · 2026-10-28

### 漏洞概述 - **漏洞名称**: CVE-2024-38378 - **漏洞类型**: 远程代码执行（RCE） - **受影响组件**: Apache Tomcat - **漏洞描述**: 在Apache Tomcat中，由于对某些HTTP请求头的处理不当，攻击者可以通过构造特定的HTTP请求来触发远程代码执行。 ### 影响范围 - **受影响版本**: Apache Tomcat 9.…

CVSS 4.9

libxml2 xmlSchemaValidateCtxt Stack Overflow/DoS Vulnerability POC and Fix

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `xmlSchemaValidateCtxt` function in the `libxml2` library. When processing XML documents containing specifically crafted XML Schema Definitio…

CVSS 4.9

libxml2 xmlSAX2UserParseFile Stack Overflow RCE Vulnerability and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a security issue in the `libxml2` library when processing XML entities. Specifically, parsing XML documents containing a large number of entity r…

CVSS 4.9

libxml2 xmlSchemaValidateCtxt Stack Overflow Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a critical issue in the `libxml2` library when processing XML documents. Specifically, when parsing XML documents containing specific crafted str…

CVSS 6.5

VikRentCar 1.4.10 Authenticated SQL Injection via backit Cookie

www.wordfence.com · 2026-10-28

# Vulnerability Summary: VikRentCar Car Rental Management System 1.4.10 Authentication Bypass Vulnerability ## Vulnerability Overview - **Vulnerability Name**: VikRentCar Car Rental Management System …

CVSS 4.9

Sphinx-build Arbitrary File Write via Template Injection Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves an infinite recursion issue in the `libxml2` library when processing XML entities, which can lead to Denial of Service (DoS) attacks. When parsin…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.