漏洞描述 安卓(Android)是一种基于Linux的自由及开放源代码的操作系统,由谷歌公司和开放手机联盟领导及开发。 Google Android 6.0、6.0.1、7.0、7.1.1、7.1.2中的Framework组件存在远程代码执行漏洞。攻击者可利用该漏洞实现远程代码执行。
相关漏洞推荐 POC freshrss-api: FreshRSS Google Reader API Exposure POC gcloudignore-file-exposure: Google Cloud Ignore File Exposure POC google-calendar-exposure: Google Calendar - Exposure POC wp-duracelltomi-google-tag-manager-fpd: WordPress Plugin Google Tag Manager - Full Path Disclosure POC CVE-2025-12139: Integrate Google Drive <= 1.5.3 - Information Disclosure POC gcs-bucket-listing: Google Cloud Storage - Public Bucket Listing POC wp-duracelltomi-google-tag-manager-fpd: WordPress Plugin Google Tag Manager - Full Path Disclosure POC CVE-2025-11307: WP Google Maps < 9.0.48 - Cross-Site Scripting POC wp-easy-google-fonts-log-disclosure: WordPress Easy Google Fonts - Error Log Disclosure Astro Web Framework Cloudflare /_image 服务器端请求伪造漏洞(CVE-2025-58179) Spring Framework路径遍历漏洞(CVE-2024-38819) WordPress Google for WooCommerce /wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/scripts/print_php_information.php 信息泄露漏洞(CVE-2024-10486) Vmware Spring Framework 逻辑缺陷漏洞