漏洞描述 Linear eMerge E3 系列是楼宇管理系统中行业领先的产品之一,因为它是行业中使用最广泛的产品之一。该系统badge_layout_new_v0.php存在任意文件上传漏洞,攻击者可通过该漏洞上传Webshell,获取服务器权限。
相关漏洞推荐 CVE-2022-31269: Linear eMerge E3-Series - Information Disclosure POC 2025-08-01 | Linear eMerge E3-Series Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are sto... CVE-2022-31499: Nortek Linear eMerge E3-Series <0.32-08f - Remote Command Injection POC 2025-08-01 | Nortek Linear eMerge E3-Series Nortek Linear eMerge E3-Series devices before 0.32-08f are susceptible to remote command injection v... CVE-2022-31798: Nortek Linear eMerge E3-Series - Cross-Site Scripting POC 2025-08-01 | Nortek Linear eMerge E3-Series There is a local session fixation vulnerability that, when chained with cross-site scripting, leads ... CVE-2019-0193: Apache Solr Remote Code Execution POC 2025-09-01 | Apache Solr 2019 年 08 月 01 日,Apache Solr 官方发布预警,Apache Solr DataImport 功能 在开启 Debug 模式时,可以接收来自请求的”dataConfig”参数,... CVE-2019-0230: Apache Struts <=2.5.20 - Remote Code Execution S2-059 POC 2025-09-01 | Apache Struts Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation when evaluated on raw user input in tag ...