漏洞描述
Dify存在远程命令执行漏洞，攻击者可以利用该漏洞执行任意命令，进而控制整个服务器。
Dify存在远程命令执行漏洞
PoC代码
暂无相关漏洞推荐
- Dify存在用户名枚举漏洞(CVE-2025-11750)
- POC CVE-2025-56520: Dify v1.6.0 - Server-Side Request Forgery
- POC CVE-2025-63387: Dify v1.9.1 - Broken Access Control
- Dify /console/api/remote-files/upload 服务器端请求伪造漏洞
- western-digital-mycloud-multi-uploadify-file-upload: Western Digital MyCloud Multi Uploadify File Upload
- POC weaver-lazyuploadify-file-upload: OA E-Office LazyUploadify - Arbitrary File Upload
- POC weaver-uploadify-file-upload: OA E-Office Uploadify - Arbitrary File Upload
- POC CVE-2025-11750: Dify - User Enumeration via "Account not found" Message
- Dify存在SSRF漏洞（CVE-2025-29720）
- Dify 任意用户密码重置绕过漏洞
- dify 安全漏洞
- 赛蓝 企业管理系统 SubmitUploadify 未授权 任意文件上传漏洞
- 博采网络-建站服务-uploadify.php文件上传