Related VulnerabilitiesPoCCVE-2026-19092: Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function InvocationPoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site ScriptingPoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCENuclio /api/functions 文件上传漏洞 Nuclio /api/functions runtimeAttributes.repositories 命令执行漏洞(CVE-2026-52833)FlowiseAI Flowise /api/v1/node-custom-function 代码执行漏洞(CVE-2026-46442)Hepta Platforms|Heptabase - Exposed Dangerous Method or FunctionWindows截图工具NTLM信息泄露漏洞(CVE-2026-33829)PoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web FrameworksGradio /static//windows/win.ini 文件读取漏洞 (CVE-2026-28414)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)PoCazure-functions-hostjson-exposure: Azure Functions host.json Configuration Exposure东胜物流软件 /TruckMng/MsWlDriver/UploadFile 文件上传漏洞