相关漏洞推荐 POC CVE-2025-27817: Apache Kafka Client - Arbitrary File Read POC CVE-2025-66516: Apache Tika - XML External Entity Injection POC servicestack-requestlogs: ServiceStack Request Logs - Unauthenticated Access POC apache-spark-env: Apache Spark Environment - Exposure Apache Struts XWork组件 XML外部实体注入漏洞(CVE-2025-68493) 金蝶云星空 /Kingdee.BOS.WebApi.ServicesStub.AuthService.ValidateLoginInfo.common.kdsvc 命令执行漏洞 POC CVE-2011-3600: Apache OFBiz - XML External Entity Injection POC CVE-2022-34305: Apache Tomcat Examples Web Application - Cross-Site Scripting POC CVE-2025-55184: React Server Components - Denial of Service POC apache-mod-negotiation-listing: Apache mod_negotiation - Pseudo Directory Listing 金和OA AjaxForCenterBudgetDecompose.ashx SQL注入漏洞 用友NC及NC Cloud系统 /uapws/service/nc.itf.bap.service.IBapIOService getBapTableDatas SQL 注入漏洞 POC 网神SecFox运维安全管理与审计系统 /3.0/authService/login 命令执行漏洞