Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Security Intel Hub 70+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Examples: RCE · SSRF · GHSA · log4j
Filter
Clear filters
Premium intel
High
Grav API Plugin SSTI: API Key Scope Bypass in PagesController GuardTwigContent
github.com · 2026-08-14
getgrav/grav-plugin-api <= 1.0.12
Read more
Premium intel
Critical
API Key Scope Bypass in InvitationsController Creates Super Admin - grav-plugin-api
github.com · 2026-08-14
getgrav/grav-plugin-api <= 1.0.12
Read more
Premium intel
Premium intel
Medium
Grav Form Plugin Radio/Toggle Option Stored XSS (CVE-2026-42842)
CVE-2026-42842 · github.com · 2026-08-14
getgrav/grav-form-plugin <= 9.1.14
Read more
Medium
Stored XSS in getgrav/grav via detectXss quoted-attribute bypass
github.com · 2026-08-14
getgrav/grav >= 1.5.2, <= 2.0.12
Read more
Premium intel
High
Grav Flex Objects Authorization Bypass (GHSA-pc8m-jxvh-vmrc) Analysis and Fix
GHSA-pc8m-jxvh-vmrc · github.com · 2026-08-14
Flex Objects (Grav Plugin) 1.4.6 · getgrav/grav >=2.0.11
Read more
Premium intel
Premium intel
High
Grav Plugin API: Bypass 2FA via Authorization Check Failure
github.com · 2026-08-14
getgrav/grav-plugin-api <= 1.0.12
Read more
Premium intel
Critical
Grav API Plugin Scope Bypass RCE
github.com · 2026-08-14
getgrav/grav-plugin-api <= 1.0.12
Read more
Premium intel
High
Grav API Plugin Privilege Escalation via Scoped API Key Bypass
GHSA-jqqg-v53x-x99g · github.com · 2026-08-14
getgrav/grav-plugin-api 1.0.6 · getgrav/grav-plugin-api 1.0.7 …
Read more
Premium intel
Critical
Grav API Plugin Privilege Escalation via API Key Scope Bypass
github.com · 2026-08-14
getgrav/grav-plugin-api <= 1.0.12
Read more
Premium intel
Medium
Grav API Plugin Authorization Bypass Analysis
github.com · 2026-08-14
getgrav/grav-plugin-api <= 1.0.12
Read more
Premium intel
Low
Grav Form Plugin Dynamic Open Redirect via Twig Evaluation
github.com · 2026-08-03
getgrav/grav-plugin-form 9.1.12
Read more
Medium
Grav Plugin Login Session Expiration Bypass Allowing Credential Replay
github.com · 2026-07-29
getgrav/grav-plugin-login <= 3.8.12
Read more
Premium intel
Unknown
Grav CMS Pre-Auth Path Parsing Error Fix in Markdown Parser
github.com · 2026-07-23
Grav CMS < 2.0.13
Read more
Premium intel
Medium
Grav CMS Flex Framework RCE via Unvalidated dynamicDataField
GHSA-62fp-q2t-74d5 · github.com · 2026-07-23
Grav >= 1.7.0
Read more

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.