References https://avd.aliyun.com/detail?id=AVD-2024-21434 https://zone.ci/aliyun/ali_nvd/365186.html https://feedly.com/cve/CVE-2024-21434 https://threats.kaspersky.com/en/vulnerability/KLA65126/ https://www.zerodayinitiative.com/advisories/ZDI-22-1071/
Related VulnerabilitiesPoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCEMicrosoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞（CVE-2025-53770）Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞（CVE-2026-50522）Microsoft SharePoint Server JWT 权限绕过漏洞（CVE-2026-55040）Windows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Gradio /static//windows/win.ini 文件读取漏洞 （CVE-2026-28414）Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)PoCCVE-2021-28480: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)PoCCVE-2021-28481: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)PoCsharepoint-lists-api-disclosure: Microsoft SharePoint - List API DisclosurePoCCVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File ExposurePoCsharepoint-layouts-disclosure: Microsoft SharePoint - Layouts DisclosurePoCsharepoint-masterpage-disclosure: Microsoft SharePoint - Master Page Disclosure