Related VulnerabilitiesPoCCVE-2026-64638: WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)用友NC /uapws/service/nc.itf.msgcenter.IMsgCenterWebService SQL 注入漏洞用友 NC /uapws/service/nc.itf.bap.oba.IObaExcelService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICustomerImportToNcService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICurrtypeExportToCrmService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService SQL 注入漏洞用友 NC /uapws/service/nc.uap.oba.word.webservice.IServiceEntryPoint XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bap.oba.IObaWordService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.IPsndocExportToCrmService XML 外部实体注入漏洞用友 NC /uapws/service/nc.uap.oba.wordWebservice.IServiceEntry XML 外部实体注入漏洞PoCmagento-polyshell-rce: Magento PolyShell – Unauthenticated File Upload to RCEWindows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)