漏洞描述
【漏洞对象】Emby 【涉及版本】 Emby MediaServer 3.2.5 【漏洞描述】 用户在未经授权的情况下即可重置服务器漏洞，进而控制设备。
Emby MediaServer 3.2.5-密码重置漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2020-26935: phpMyAdmin < 5.0.3 - SQL Injection
- POC CVE-2020-9314: Oracle iPlanet Web Server 7.0.x - Image Injection
- POC CVE-2021-21246: OneDev < 4.0.3 - User Access Token Leak
- POC CVE-2022-4223: pgAdmin < 6.17 - Unauthenticated Remote Code Execution
- POC CVE-2024-23055: Plone Docker - Host Header Injection
- POC CVE-2025-13418: Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting
- POC CVE-2025-3472: Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution
- POC CVE-2025-36845: Eveo URVE Web Manager - Server-Side Request Forgery
- POC CVE-2025-49533: Adobe Experience Manager Forms - Insecure Deserialization
- POC CVE-2025-55303: Astro - Unauthorized Third-Party Image Access
- POC CVE-2025-8110: Gogs <= 0.13.3 - Remote Code Execution
- POC CVE-2026-21859: Mailpit < 1.28.3 - Server-Side Request Forgery
- POC CVE-2026-23550: Modular DS - Broken Access Control