Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Security Intel Hub 83420+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254
Sources connected
135
Sources online now
602
New intel in 24h
83,420+
AI-processed intel
Continuous monitoring and AI processing Monitor intel
Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library
Examples: RCE · SSRF · GHSA · log4j
Filter
CVSS 4.3
WordPress WP-PageNavi 3.8.8.1 Unfiltered POST Parameter RCE Vulnerability with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `xmlSAX2ParseFile` function in the `libxml2` library. When parsing XML files containing specific structures, it may lead to a stack overflow. …

Read more
CVSS 4.3
libxml2 Buffer Overflow RCE Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a security flaw in the `libxml2` library when processing XML documents. Specifically, when parsing XML documents containing specially crafted con…

Read more
CVSS 4.3
WordPress WP-PageNavi SQL Injection Vulnerability with POC Code
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: Arbitrary File Upload Vulnerability - **Vulnerability Type**: File Upload Vulnerability - **Vulnerability Description**: Under specific conditions,…

Read more
CVSS 4.3
SQL Injection in WP-PageNavi v3.5.3: Exploit Analysis & POC
plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述 该漏洞涉及WordPress插件“WP-PageNavi”在版本3.5.0及更早版本中存在一个SQL注入漏洞。攻击者可以通过构造特定的URL请求，利用该漏洞执行任意SQL命令，从而可能获取敏感数据、修改数据库内容或完全控制网站。 ### 影响范围 - **受影响插件**: WP-PageNavi - **受影响版本**: 3.5.0及更早版本 - **受影响平台**: WordP…

Read more
CVSS 4.3
libxml2 xmlParseDocument Stack Overflow RCE Analysis with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a security flaw in the "WooCommerce" WordPress plugin in version 3.8.0 and earlier. Attackers can exploit this vulnerability by injecting malicio…

Read more
CVSS 4.3
3.5714dm LinkScreen XSS Vulnerability Analysis and Fix POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Type**: Cross-Site Scripting (XSS) - **Vulnerability Description**: An XSS vulnerability exists in the `wp/trunk/3.5714dm/LinkScreen/Page.php` file, allowi…

Read more
CVSS 7.2
Samba smbd RCE Vulnerability CVE-2017-12629 Analysis and POC Code
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `sapphire.php` file within the `sapphire-theme` plugin, specifically at line 142. Attackers can trigger a file inclusion vulnerability by craf…

Read more
CVSS 7.2
CVE-2021-41272: WP-PostViews Plugin RCE via File Inclusion with POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2021-41078 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Component**: `libxml2` library - **Vulnerability Description**: A…

Read more
CVSS 7.2
Sapphire-Theme Plugin SQL Injection Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `sapphire.php` file within the `sapphire-theme` plugin, specifically located at line 1472. The vulnerability type is **SQL Injection**, allow…

Read more
CVSS 7.2
svelte-preprocess CVE-2019-14221 RCE Analysis and POC Code
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2021-41079 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Component**: WordPress Plugin "WP-PostViews" - **Vulnerability De…

Read more
CVSS 7.2
Bohemnes Prime Slider LFI Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: Arbitrary File Read Vulnerability - **Vulnerability Description**: An arbitrary file read vulnerability exists in the `class-gui.php` file of the `…

Read more
CVSS 7.2
billionaire Go Package Integer Overflow (CWE-190) Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `billionaire` module within the `billionaire` package, specifically the `billionaire` function. A security flaw exists in how this function ha…

Read more
CVSS 4.4
WP Book Plugin SQL Injection Vulnerability Analysis with POC and Exploit Code
plugins.trac.wordpress.org · 2026-10-28

# Vulnerability Summary ## Vulnerability Overview - **Vulnerability Type**: SQL Injection - **Vulnerability Location**: `block_manager()` function in the `class-block-manager.php` file - **Vulnerabili…

Read more
CVSS 4.3
Piglet Directory Arbitrary File Upload Leading to RCE: Analysis and Mitigation
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `admin.php` file of the `Piglet Directory` plugin, specifically within the `page` parameter handling logic. Attackers can craft specific URL…

Read more
CVSS 4.3
boding-manager admin.php SQL Injection Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `admin` page of the `boring-manger` plugin, specifically the file `admin.php`. A SQL injection vulnerability exists in `admin.php`, allowing a…

Read more
CVSS 4.3
Tour Booking Manager Unauth File Include Vuln Analysis & POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Type**: Unauthorized File Inclusion Vulnerability - **Affected Plugin**: Tour Booking Manager - **Vulnerability Description**: This vulnerability allows un…

Read more
CVSS 6.4
If So Dynamic Content <1.10.2 Authenticated Stored XSS (CVE-2024-19344) Advisory
www.wordfence.com · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: If So Dynamic Content < 1.10.2 - Authenticated (Contributor) Stored Cross-Site Scripting via 'repeater' Parameter - **CVE ID**: CVE-2024-19344 - **…

Read more
CVSS 6.4
PalmOS PHP 1.0.2 SQL Injection Vulnerability Analysis and Exploitation POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `palmos-class-of-palmos.php` file and involves the implementation of multiple functions and classes. The primary issues include: 1. **Unvali…

Read more
CVSS 4.9
libxml2 Null Pointer Dereference DoS Vulnerability Analysis and POC
plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a recursive parsing issue in the `libxml2` library when handling XML entities, leading to Denial of Service (DoS) attacks. Attackers can craft ma…

Read more
CVSS 6.4
Apache Struts2 S2-045 RCE Vulnerability Analysis and POC
www.wordfence.com · 2026-10-28

根据提供的网页截图，以下是关于漏洞的关键信息总结： ### 漏洞概述 - **漏洞名称**: Apache Struts2 S2-045 - **漏洞描述**: 该漏洞允许攻击者通过构造特定的HTTP请求，在目标服务器上执行任意命令。 - **严重性**: 高（CVSS评分为9.8） ### 影响范围 - **受影响版本**: Apache Struts 2.3.x 和 2.5.x 系列的部分版本…

Read more

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.