飞致云 1Panel 需授权 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Mr-xn/CVE-2025-54424
• https://www.oschina.net/news/364132
• https://avd.aliyun.com/detail?id=AVD-2025-54424
• https://cve.imfht.com/poc_detail/bf86eaf1fcfaf4811f5210a0a75b8759bf8716de
• https://www.knowsafe.com/ti/info/0/1000636
• https://bbs.fit2cloud.com/t/topic/3364
• https://avd.aliyun.com/product?prod=1panel
• https://github.com/1Panel-dev/1Panel/security/advisories

Related Vulnerabilities

• 飞致云 1Panel 未授权 设计缺陷漏洞
• 飞致云 1Panel 身份验证缺陷漏洞
• PoC1Panel 远程命令执行漏洞
• PoCCVE-2024-39907: 1Panel SQL Injection - Authenticated
• PoC1panel-loadfile-fileread: 1Panel loadfile 后台文件读取漏洞
• （CVE-2025-4546）1Panel MaxKB知识库模块CSV注入漏洞
• 1Panel CVE-2024-39911 SQL注入漏洞
• 1Panel 前台面板SQL注入导致RCE漏洞
• 1Panel loadfile 任意文件读取漏洞
• 1Panel CVE-2024-2352 命令注入漏洞
• 1Panel CVE-2023-36457 命令注入漏洞