Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

Security Intel Hub 83420+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254

Sources connected

135

Sources online now

602

New intel in 24h

83,420+

AI-processed intel

Continuous monitoring and AI processing Monitor intel

Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library

Filter

KEV only

Verified PoC

CVSS 6.4

Magento 1.x salesrule Arbitrary Code Execution Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `salesrule` module of Magento 1.x, specifically in the file `salesrule.php`. Attackers can craft specific request parameters to bypass permi…

CVSS 5.4

CMB2 Plugin File Inclusion (LFI/RFI) Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This screenshot displays the source code of the `CMB2_Type_Wysiwyg.php` file from the WordPress Plugin Directory. **It does not directly show any known vulnerability descrip…

CVSS 6.4

Magento 1.x Media Gallery Input Validation Bypass: Analysis & POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `catalog_product_entity_media_gallery` table in Magento 1.x versions. Specifically, when inserting or updating product media galleries, the ap…

CVSS 6.4

WordPress Popup Plugin Code Injection Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: 3758337 - **Release Date**: December 7, 2022 - **Author**: Denny - **Message**: Update to version 7.8.1.4 - **File**: `wordpress-popup/trunk/inc/fron…

Premium intel

CVSS 5.9

Bit Flows AI Agent: Unauthenticated DoF File Inclusion leading to RCE

www.wordfence.com · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: Bit Flows AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More v 13.1.0 - Unauthenticated DoF File Inclusion via W…

Premium intel

CVSS 5.9

Laravel 5.8.x Request Class Security Bypass Vulnerability Analysis and Fix

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `Illuminate\View\Compilers\BladeCompiler` class in the Laravel framework, specifically a potential security issue within the `compileStatemen…

CVSS 5.9

Laravel BladeCompiler RCE Vulnerability Analysis (5.8/5.9)

plugins.trac.wordpress.org · 2026-10-28

Premium intel

CVSS 5.9

Laravel BladeCompiler RCE Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `Illuminate\View\Compilers\BladeCompiler` class within the Laravel framework, specifically a potential security issue in the `compileStatemen…

Premium intel

CVSS 5.9

libgpg-error Buffer Overflow in gpg_err_source_t with POC Code

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `gpg_err_source_t` function within the `libgpg-error` library, which contains a buffer overflow issue when processing error sources. Attacker…

CVSS 5.9

1.132.0-frontend index.php Path Traversal & File Read Vulnerability Analysis

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `api/HTTP/Controllers` directory of `http://1.132.0-frontend`, specifically the file `index.php`. It allows attackers to bypass security restr…

CVSS 6.5

Magento GraphQL Inventory Unauth Access: Bypass & POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `Magento\Graphql\Inventory` module in Magento versions 2.3.6 and earlier. Attackers can exploit this vulnerability via the GraphQL interface t…

CVSS 6.5

Magento 2.3.0-2.3.6 getPrice RCE Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述该漏洞涉及 Magento 2.3.0 到 2.3.6 版本中的 `Magento\Quote\Model\Quote\Item` 类的 `getPrice()` 方法。攻击者可以通过构造特定的请求，利用该漏洞进行远程代码执行（RCE）。 ### 影响范围 - **受影响版本**: Magento 2.3.0 到 2.3.6 - **受影响组件**: `Magento\Quote…

CVSS 6.5

W3 Total Cache Arbitrary Code Execution via w3tc-widget-page-reviews with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `w3tc-widget-page-reviews` component of the WordPress plugin `w3-total-cache`, specifically within the file `includes/admin/class-admin-meta.p…

CVSS 7.2

WordPress simple-broadcast Arbitrary File Upload (CVE-2021-39171) POC and Exploit Code

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2021-39171 - **Vulnerability Type**: Arbitrary File Upload Vulnerability - **Vulnerability Description**: An arbitrary file upload vulnerabilit…

Apache Log4j2 CVE-2021-44228 RCE via JNDI: Analysis, POC, and Mitigation

www.anquanke.com · 2026-10-28

# 漏洞总结：Apache Log4j2 远程代码执行漏洞（CVE-2021-44228） ## 漏洞概述 Apache Log4j2 是一个广泛使用的 Java 日志记录库。该漏洞允许攻击者通过构造特殊的日志消息，利用 Log4j2 的 JNDI（Java Naming and Directory Interface）功能，实现远程代码执行（RCE）。攻击者只需让目标系统记录一条包含恶意 JND…

CVSS 4.8

libxml2 Stack Overflow Vulnerability Analysis and POC Code

plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述该漏洞涉及 `libxml2` 库中的 `xmlSAX2UserParseFile` 函数，当处理包含特定结构的 XML 文件时，会导致堆栈溢出。攻击者可以通过构造恶意 XML 文件来触发此漏洞，从而可能执行任意代码或导致服务崩溃。 ### 影响范围 - **受影响版本**：`libxml2` 2.9.2 及更早版本。 - **受影响系统**：使用 `libxml2` 库的任何应…

CVSS 4.8

libxml2 xmlSAX2ParseFile Stack Overflow RCE Vulnerability with PoC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `xmlSAX2ParseFile` function within the `libxml2` library. When processing XML files containing specifically crafted content, it can lead to a …

CVSS 4.8

django-celery-beat SQL Injection (CWE-89) Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `models.py` file in the `django-celery-beat` library versions 2.2.2 and earlier. Specifically, the `crontab` field in the `PeriodicTask` model…

CVSS 4.8

django-celery-beat 2.2.2 CrontabSchedule Field Validation Bypass Analysis and Fix

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `django-celery-beat` library in versions 2.2.2 and earlier, specifically within the `models.py` file. Specifically, the `crontab` field in the…

CVSS 4.8

Remote Code Execution via Subject Injection in sendmail.php: Analysis & POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves a custom email sending method invoked within the `sendmail.php` file. Attackers can trigger the vulnerability by crafting specific email subjects…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.