References https://www.ddpoc.com/DVB-2025-9070.html https://cn-sec.com/archives/4219370.html https://www.ddpoc.com/DVB-2022-3456.html https://www.tutusec.com/1737.html https://zhuanlan.zhihu.com/p/1932214870562047555 https://www.gm7.org/archives/32778 https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11_v2
Related Vulnerabilities(CVE-2025-13788)Chanjet CRM /tools/upgradeattribute.php gblOrgID参数SQL注入漏洞Optilink 管理系统 /cgi/fsystem/gene.php 命令执行漏洞PoCdms-version-upgrade: DMS Auto Minor Version UpgradePoCrds-auto-minor-upgrade-disabled: RDS Auto Minor Version Upgrade - DisabledPoCazure-vmss-auto-os-upgrade-missing: Azure VMSS Automatic OS Upgrade Not EnabledPoCgcloud-gke-auto-upgrade-disabled: GKE Node Pools Without Auto-Upgrade EnabledPoCgcloud-vertexai-auto-upgrades: Automatic Upgrades Not Enabled for Vertex AI NotebooksPoCitc-remote-upgrade-fileupload: IP 广播服务平台未授权文件上传漏洞PoCcombodo-itop-installer: Combodo iTop Installer/Upgrade - ExposurePoCunauth-mautic-upgrade: Unauthenticated Mautic Upgrade.php ExposurePoCoptilink-ont1gew-gpon-rce: OptiLink ONT1GEW GPON Remote Code Execution大唐电信AC集中管理平台 ac_upgrade 任意文件读取漏洞