Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

Security Intel Hub 83420+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254

Sources connected

135

Sources online now

602

New intel in 24h

83,420+

AI-processed intel

Continuous monitoring and AI processing Monitor intel

Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library

Filter

KEV only

Verified PoC

CVSS 4.9

Unauthorized Access Vulnerability: POC Code and Fix Details

github.com · 2026-10-28

### 漏洞概述 - **漏洞名称**: CVE-2024-38378 - **漏洞类型**: 远程代码执行（RCE） - **受影响组件**: Apache Tomcat - **漏洞描述**: 在Apache Tomcat中，由于对某些HTTP请求头的处理不当，攻击者可以通过构造特定的HTTP请求来触发远程代码执行。 ### 影响范围 - **受影响版本**: Apache Tomcat 9.…

CVSS 4.9

libxml2 xmlSchemaValidateCtxt Stack Overflow/DoS Vulnerability POC and Fix

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `xmlSchemaValidateCtxt` function in the `libxml2` library. When processing XML documents containing specifically crafted XML Schema Definitio…

CVSS 4.9

libxml2 xmlSAX2UserParseFile Stack Overflow RCE Vulnerability and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a security issue in the `libxml2` library when processing XML entities. Specifically, parsing XML documents containing a large number of entity r…

CVSS 4.9

libxml2 xmlSchemaValidateCtxt Stack Overflow Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a critical issue in the `libxml2` library when processing XML documents. Specifically, when parsing XML documents containing specific crafted str…

CVSS 6.5

VikRentCar 1.4.10 Authenticated SQL Injection via backit Cookie

www.wordfence.com · 2026-10-28

# Vulnerability Summary: VikRentCar Car Rental Management System 1.4.10 Authentication Bypass Vulnerability ## Vulnerability Overview - **Vulnerability Name**: VikRentCar Car Rental Management System …

CVSS 4.9

Sphinx-build Arbitrary File Write via Template Injection Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves an infinite recursion issue in the `libxml2` library when processing XML entities, which can lead to Denial of Service (DoS) attacks. When parsin…

CVSS 6.4

WordPress ACF Plugin SQL Injection Vulnerability Analysis and Fix Guide

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects multiple versions of the WordPress plugin "Advanced Custom Fields" (ACF), specifically: - **Vulnerability Type**: SQL Injection - **Affected Versi…

CVSS 6.4

Cisco ASA 5500-X Web UI RCE (CVE-2019-1010024) POC and Exploit Code

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects multiple versions of the WordPress plugin "Advanced Custom Fields" (ACF), specifically version 5.8.10 and earlier. Attackers can exploit this vuln…

CVSS 6.5

Tiger 1.4.1 Plugin: Arbitrary Code Execution via eval() in mod_ukvverifier_care_helper.php

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `wp-content/plugins/tiger-1.1.1/modules/mod_ukvverifier_care_helper.php` file and manifests as a Local File Inclusion (LFI) flaw. Attackers …

CVSS 6.4

WordPress shortcodes-extended LFI Vulnerability Analysis, POC, and Mitigation

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview The screenshot illustrates a Remote Code Execution (RCE) vulnerability in the WordPress plugin `shortcodes-extended`. Attackers can construct specific HTTP requests to execu…

CVSS 6.5

Joomla Uker Banner Arbitrary File Inclusion Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `um_get_user_data()` function in the `um_helper.php` file of the WordPress plugin "Ultimate Member". Attackers can craft specific request par…

CVSS 6.5

Wordfence Advisory: Authenticated SQL Injection in WP Visitor Statistics Plugin (v6-8.8)

www.wordfence.com · 2026-10-28

### Vulnerability Overview **Vulnerability Title**: WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute **Vulnerability Descrip…

CVSS 6.5

Franklin Plugin admin.php Arbitrary File Upload Vulnerability and RCE POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: Arbitrary File Upload Vulnerability - **Vulnerability Description**: An arbitrary file upload vulnerability exists in the `franklin/includes/admin.…

CVSS 4.3

Apache Log4j CVE-2021-44228 Log4Shell RCE Analysis, Mitigation, and Exploitation Guide

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview **Vulnerability Name**: CVE-2021-41078 - Remote Code Execution Vulnerability **Vulnerability Description**: A remote code execution vulnerability exists in the `libxml2` lib…

CVSS 4.3

RCE in django-hg hgweb.py: Vulnerability Analysis, POC, and Remediation

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `hgweb.py` file within the `django-hg` module, specifically at line 1281. Attackers can craft specific HTTP requests to exploit a code logic f…

CVSS 4.3

CVE-2021-41080: django-hijack Remote Code Execution (RCE) Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2021-41080 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Component**: `django-hijack` module - **Vulnerability Description…

CVSS 5.4

WordPress Contact Form 7 File Upload RCE Vulnerability with POC

github.com · 2026-10-28

### Vulnerability Overview This vulnerability involves the file upload functionality in the WordPress plugin "Contact Form 7". Attackers can exploit this vulnerability to upload malicious files, there…

CVSS 5.4

libxml2 xmlSchemaValidateCtxt Memory Corruption Vulnerability Analysis and Fix

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `xmlSchemaValidateCtxt` function in the `libxml2` library, specifically manifesting as a memory corruption issue during XML Schema parsing. A…

CVSS 4.3

WordPress clean-login Plugin Arbitrary Page Edit Vulnerability Analysis and Fix

plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述 - **漏洞编号**: CVE-2020-10727 - **漏洞类型**: 权限提升漏洞 - **受影响插件**: Clean Login - **漏洞描述**: 该漏洞允许未经授权的站点管理员从公共插件中获取并修改更改的登录页面。 ### 影响范围 - **受影响版本**: Clean Login 插件的特定版本（具体版本未明确列出，但根据漏洞编号推测为2020年发布的版本）…

CVSS 5.4

WP-PageNavi SQL Injection Vulnerability Analysis and POC (v3.8.4)

plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述该漏洞涉及WordPress插件“WP-PageNavi”在版本3.8.4及之前版本中存在一个SQL注入漏洞。攻击者可以通过构造特定的URL请求，利用该漏洞执行任意SQL命令，从而可能获取敏感数据、篡改数据库内容或完全控制服务器。 ### 影响范围 - **插件名称**: WP-PageNavi - **受影响版本**: 3.8.4及之前版本 - **影响功能**: 分页功能 -…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.