瑞賦科技 IOT Wall - Reflected XSS

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-6963-7d2ee-1.html
• https://www.twcert.org.tw/newepaper/cp-151-6963-7d2ee-3.html
• https://cve.imfht.com/detail/CVE-2023-25018
• https://net-edu.ylc.edu.tw/News_Content.aspx?n=108691&sms=55948&s=187477
• https://zone.ci/aliyun/ali_nvd/38655.html
• https://www.nsfocus.net/vulndb/79024
• https://www.twcert.org.tw/tw/lp-132-1-7-60.html
• https://cve.imfht.com/detail/CVE-2023-25018?lang=en
• https://www.twcert.org.tw/newepaper/lp-151-3-21-20.html

Related Vulnerabilities

• PoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSS
• PoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting
• PoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site Scripting
• PoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting
• PoCCVE-2026-49069: WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site Scripting
• PoCCVE-2026-64638: WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)
• PoCCVE-2026-52774: YesWiki Bazar Widget - Reflected XSS via 'id' Parameter
• PoCCVE-2026-55592: Dashy <= 4.3.6 - Reflected XSS via Workspace
• PoCCVE-2025-47783: Label Studio < 1.18.0 - Reflected XSS
• PoCCVE-2025-61224: DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting
• PoCyeswiki-reflected-xss: YesWiki - Cross-Site Scripting
• PoCphpjabbers-event-booking-xss: PHPJabbers Event Booking Calendar - Reflected XSS
• PoCodoo-login-redirect: Reflected Odoo - Open Redirect