漏洞描述 安卓(Android)是一种基于Linux的自由及开放源代码的操作系统,由谷歌公司和开放手机联盟领导及开发。 Google Android 6.0、6.0.1、7.0、7.1.1、7.1.2中的Framework组件存在远程代码执行漏洞。攻击者可利用该漏洞实现远程代码执行。
相关漏洞推荐 POC CVE-2025-11307: WP Google Maps < 9.0.48 - Cross-Site Scripting POC wp-easy-google-fonts-log-disclosure: WordPress Easy Google Fonts - Error Log Disclosure Astro Web Framework Cloudflare /_image 服务器端请求伪造漏洞(CVE-2025-58179) Spring Framework路径遍历漏洞(CVE-2024-38819) WordPress Google for WooCommerce /wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/scripts/print_php_information.php 信息泄露漏洞(CVE-2024-10486) Vmware Spring Framework 逻辑缺陷漏洞 (CVE-2025-0087) Android UninstallerActivity onCreate 方法权限漏洞 权限管理错误 金和OA C6 /c6/jhsoft.mobileapp/AndroidSevices/HomeService.asmx/GetHomeInfo SQL 注入漏洞 POC CVE-2020-0646: Microsoft .NET Framework - Remote Code Execution POC spring4shell-CVE-2022-22965: Spring Framework RCE via Data Binding on JDK 9+ POC CVE-2015-2755: WordPress AB Google Map Travel <=3.4 - Stored Cross-Site Scripting POC CVE-2016-6601: ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion POC CVE-2017-1000163: Phoenix Framework - Open Redirect