目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

state:has-public-poc 标签下的 CVE 漏洞 126

state:has-public-poc 类型相关 126 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“state:has-public-poc”标签标识已公开概念验证代码的漏洞。这意味着攻击者无需逆向工程即可直接利用漏洞，极大降低了攻击门槛，使非专业黑客也能发起有效攻击。该状态表明漏洞利用风险极高，企业需立即优先修复。典型场景包括远程代码执行或权限提升，攻击者通过运行公开脚本即可快速入侵系统，导致数据泄露或服务中断，对网络安全构成紧迫威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2026-122146 fflate 内存破坏漏洞 — fflate CWE-119 7.3 High 2026-11-05
CVE-2026-121597 TOTOLINK A950RG 栈溢出漏洞 — A950RG CWE-121 9.9 Critical 2026-11-04
CVE-2026-116114 Yoosee GM8135S 摄像机视频流明文传输漏洞 — GM8135S Camera CWE-319 3.7 Low 2026-10-26
CVE-2026-116053 mycli source.py 命令注入漏洞 — mycli CWE-78 5.3 Medium 2026-10-25
CVE-2026-114441 php-travel-agency-system update.php SQL 注入漏洞 — php-travel-agency-system CWE-89 7.3 High 2026-10-21
CVE-2026-114376 wiki-go API 路径遍历漏洞 — wiki-go CWE-22 6.3 Medium 2026-10-21
CVE-2026-113396 DrayTek Vigor2960 命令注入漏洞 — Vigor2960 CWE-77 7.4 High 2026-10-20
CVE-2026-112140 llSourcell Doctor chat_module.py 代码注入漏洞 — Doctor-Dignity CWE-94 6.3 Medium 2026-10-19
CVE-2026-112087 itsourcecode 蛋糕订购系统 confirm.php SQL 注入漏洞 — Online Cake Ordering System CWE-89 6.3 Medium 2026-10-19
CVE-2026-111871 Online-Examination-System subjectsdb.php SQL 注入漏洞 — Online-Examination-System CWE-89 7.3 High 2026-10-18
CVE-2026-110695 turboderp ExLlamaV2 Safetensors 张量加载器缓冲区溢出漏洞 — ExLlamaV2 CWE-120 6.3 Medium 2026-10-14
CVE-2026-109523 Online-Appointment-Booking-System getclinic.php SQL注入漏洞 — Online-Appointment-Booking-System CWE-89 7.3 High 2026-10-13
CVE-2026-109107 Wavlink WL-WN592AX6 upload.cgi空指针解引用漏洞 — WL-WN592AX6 CWE-476 6.5 Medium 2026-10-13
CVE-2026-108968 SourceCodester Performance Indicator System 2.0 SQL注入漏洞 — Performance Indicator System CWE-89 7.3 High 2026-10-13
CVE-2026-108934 Edimax BR-6208AC HTTP表单URLB跨站脚本漏洞 — BR-6208AC CWE-79 2.4 Low 2026-10-12
CVE-2026-108909 Netcore NR268 CGI端点跨站请求伪造漏洞 — NR268 CWE-352 4.3 Medium 2026-10-12
CVE-2026-108791 Westboy CicadasCMS TemplateController输入路径遍历漏洞 — CicadasCMS CWE-22 4.3 Medium 2026-10-12
CVE-2026-108782 JEEWMS Autocomplete CommonServiceImpl.java 常见 SQL 注入漏洞 — JEEWMS CWE-89 6.3 Medium 2026-10-12
CVE-2026-108539 GPAC MP4Box gf_fq_pop 使用释放后漏洞 — GPAC CWE-416 6.3 Medium 2026-10-11
CVE-2026-107166 Open5GS GTP-U资源分配漏洞 — Open5GS CWE-770 5.3 Medium 2026-10-07
CVE-2026-105610 SpringBlade ParamController.java 参数提交管理越权漏洞 — SpringBlade CWE-285 4.7 Medium 2026-10-06
CVE-2026-105487 yogeshojha reNgine listTargets端点任务子域名发现OS命令注入漏洞 — reNgine CWE-78 6.3 Medium 2026-10-06
CVE-2026-105146 Comsenz Discuz! mod.php SQL注入漏洞 — Discuz! CWE-89 4.7 Medium 2026-10-04
CVE-2026-101260 自如ZHOME A0101首次登录命令注入漏洞 — ZHOME A0101 CWE-77 9.1 Critical 2026-09-28
CVE-2026-101143 Eleveo Quality Management QMBODownload 信息泄露漏洞 — Quality Management CWE-200 4.3 Medium 2026-09-28
CVE-2026-101074 Netcore NR289-GE 认证密码检查栈溢出漏洞 — NR289-GE CWE-121 9.8 Critical 2026-09-28
CVE-2026-100906 Eyeplus ONVIF 设备 GetUsers 信息泄露漏洞 — Eyeplus CWE-200 5.3 Medium 2026-09-28
CVE-2026-100885 Krayin Laravel CRM admin-config-setup API授权漏洞 — laravel-crm CWE-639 7.3 High 2026-09-27
CVE-2026-100315 CloudClassroom mydetailsfaculty.php SQL注入漏洞 — CloudClassroom-PHP-Project CWE-89 7.3 High 2026-09-26
CVE-2026-97646 ningzichun 学生管理系统 getStudent.php 权限绕过漏洞 — student-management-system CWE-639 7.3 High 2026-09-25

state:has-public-poc 是常见的弱点类别，本平台收录该类弱点关联的 126 条 CVE 漏洞。