Related VulnerabilitiesPoCCVE-2026-19092: Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function InvocationPoCCVE-2025-6389: Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_funcPoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCENuclio /api/functions 文件上传漏洞 Nuclio /api/functions runtimeAttributes.repositories 命令执行漏洞(CVE-2026-52833)FlowiseAI Flowise /api/v1/node-custom-function 代码执行漏洞(CVE-2026-46442)Hepta Platforms|Heptabase - Exposed Dangerous Method or FunctionPoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web FrameworksPoCazure-functions-hostjson-exposure: Azure Functions host.json Configuration ExposurePoCfunctions-php-disclosure: functions.php Full Path DisclosureSIM /api/function/execute 代码执行漏洞VICIdial /VERM/VERM_AJAX_functions.php SQL 注入漏洞(CVE-2024-8503)