全景軟體｜時戳伺服器(TSA) - Missing Authentication

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-10360-012e7-1.html
• https://infosec.fcu.edu.tw/vulnerability/cve-2025-8861/
• https://cc.ncku.edu.tw/p/404-1213-286968.php?Lang=zh-tw
• https://www.twcert.org.tw/newepaper/cp-151-10360-012e7-3.html
• https://oits.pu.edu.tw/p/406-1002-65236,r11.php?Lang=zh-tw
• https://net.nthu.edu.tw/netsys/en:mailing:announcement:20250904_03?do=export_pdf
• https://lic.nuk.edu.tw/p/406-1012-90782,r73.php?Lang=zh-tw
• https://www.twcert.org.tw/tw/lp-132-1-2-60.html

Related Vulnerabilities

• PoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass
• PoCCVE-2026-27960: OpenCTI < 6.9.13 - Authentication Bypass via User Impersonation
• PoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCE
• PoCCVE-2026-0650: OpenFlagr <= 1.1.18 - Authentication Bypass
• PoCCVE-2026-28411: WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()
• PoCCVE-2026-30849: MantisBT < 2.28.1 - SOAP API Authentication Bypass
• PoCCVE-2026-41452: Krayin CRM < 2.2.1 - Installer Authentication Bypass
• PoCCVE-2026-48558: SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass
• PoCCVE-2026-82329: JFrog Artifactory Access Blank Join Key Authentication Bypass
• PoCCVE-2026-86207: N-able N-central - Authentication Bypass
• PoCCVE-2026-18577: N-able N-central < 2026.3.1.10 - Authentication Bypass
• 鎧應科技｜CAYIN CMS-WS/CMS-SE - Missing Authentication
• PoCCVE-2025-14047: User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion