References https://blog.csdn.net/qq_36618918/article/details/135125230 https://github.com/izj007/wechat/blob/main/articles/%5B%E5%BC%A5%E5%A4%A9%E5%AE%89%E5%85%A8%E5%AE%9E%E9%AA%8C%E5%AE%A4%5D-2023-7-23-%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%EF%BC%88Fastjson%EF%BC%89.md https://zhuanlan.zhihu.com/p/625211126 https://blog.csdn.net/qq_40550150/article/details/137118692 https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/HIKVISION-%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0-applyCT-Fastjson%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://news.qq.com/rain/a/20250704A0333M00 https://www.ddpoc.com/DVB-2023-5587.html https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/2025-01/ https://nvd.nist.gov/vuln/detail/CVE-2025-34067 https://www.hikvision.com/uk/support/cybersecurity/security-advisory/clarification-on-hikvision-software---fastjson-vulnerability--cv/ https://gbhackers.com/critical-hikvision-applyct-flaw/ https://securityonline.info/critical-hikvision-applyct-flaw-cve-2025-34067-cvss-10-0-unauthenticated-rce-via-fastjson/ https://www.sentinelone.com/vulnerability-database/cve-2025-34067/
Related Vulnerabilities金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞技嘉科技|Gigabyte Control Center - Improper Access ControlPoChazelcast-management-exposure: Hazelcast Management Center - Configuration Exposure月子会所ERP管理云平台GetCustomerCenterReceiveList存在SQL注入漏洞金財通商務科技|Service Center - Insecure Direct Object Reference用友NC /uapws/service/nc.itf.msgcenter.IMsgCenterWebService SQL 注入漏洞HIKVISION 综合安防管理平台 /artemis-portal/artemis/env 信息泄露漏洞关于NC系统IMsgCenterWebService的sql注入漏洞的安全通告PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassD-Link DNS-ShareCenter /cgi-bin/gui_mgr.cgi 命令执行漏洞(CVE-2026-4204)D-Link DNS-ShareCenter /cgi-bin/download_mgr.cgi 命令执行漏洞(CVE-2026-4197)PoCvlife-fastjson-rce: Vlife FastJSON - Remote Code ExecutionPoCD-Link DNS-ShareCenter /cgi-bin/webdav_mgr.cgi 命令执行漏洞(CVE-2024-8132)