Related VulnerabilitiesPoCCVE-2026-19092: Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function InvocationPoCapache-livy-logs: Apache Livy - Logs ExposedFlowise /api/v1/loginmethod 未授权访问漏洞(CVE-2026-56270)Hepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-19478: GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method InvocationPoCds-store-file: DS_Store File - ExposedPoCCVE-2026-67208: Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database ConsolePoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCEPoCvllm-openai-api-exposed: vLLM OpenAI-Compatible API - Unauthenticated ExposureNuclio /api/functions 文件上传漏洞 Nuclio /api/functions runtimeAttributes.repositories 命令执行漏洞(CVE-2026-52833)FlowiseAI Flowise /api/v1/node-custom-function 代码执行漏洞(CVE-2026-46442)PoClaravel-passport-keys-exposed: Laravel Passport - OAuth2 Keys Exposed