Related Vulnerabilities北京中科聚网一体化运营平台 /manage/tplresource/importVisualModuleImg 文件上传漏洞时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞PoCCVE-2025-25296: Label Studio < 1.16.0 - Cross-Site ScriptingPoCCVE-2025-47783: Label Studio < 1.18.0 - Reflected XSSLabel Studio存在XSS漏洞(CVE-2025-25296)PoCsupabase-studio-exposure: Supabase Studio - ExposureWindows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Gradio /static//windows/win.ini 文件读取漏洞 (CVE-2026-28414)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)PoCCVE-2024-14015: Studiocart <= 2.9.0 - Cross-Site ScriptingPoCvscode-settings: Visual Studio Code Settings - Credential ExposurePoCvscode-mcp-json: Visual Studio Code MCP Configuration ("mcp.json") ExposurePoCvscode-slnx-sqlite-disclosure: Visual Studio Code - Slnx.SQLite File Disclosure