HiCOS 自然人憑證元件客戶端 - Stack Buffer Overflow-2

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-6291-f58b5-1.html
• https://www.twcert.org.tw/tw/cp-132-6363-f5ec2-1.html
• https://www.twcert.org.tw/tw/lp-132-1-25-20.html
• https://www.twcert.org.tw/tw/lp-132-1-9-60.html
• https://www.twcert.org.tw/newepaper/lp-151-3-25-20.html
• https://www.twcert.org.tw/tw/cp-132-6292-fb267-1.html

Related Vulnerabilities

• PoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution
• WordPress WebStack主题 /wp-admin/admin-ajax.php 文件上传漏洞（CVE-2026-1555）
• CentreStack 本地文件包含漏洞(CVE-2025-11371)
• Apache CloudStack /client/api/ 默认口令漏洞
• Gladinet CentreStack & Triofox /storage/filesvr.dn 文件读取漏洞（CVE-2025-14611）
• PoCservicestack-requestlogs: ServiceStack Request Logs - Unauthenticated Access
• PoCCVE-2025-14611: Gladinet CentreStack & Triofox - Hardcoded Credentials
• （CVE-2025-14611）Gladinet CentreStack和Triofox AES加密硬编码漏洞导致任意文件包含及安全降级
• Gladinet CentreStack & TrioFox /storage/t.dn 目录遍历漏洞（CVE-2025-11371）
• PoCCVE-2022-42475: Fortinet SSL-VPN - Heap-Based Buffer Overflow
• PoCCVE-2025-22457: Ivanti Connect Secure - Stack-based Buffer Overflow
• PoCCVE-2020-16846: SaltStack <=3002 - Shell Injection