Unity Runtime 访问控制不当漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://flatt.tech/research/posts/arbitrary-code-execution-in-unity-runtime/
• https://unity.com/security/sept-2025-01
• https://nvd.nist.gov/vuln/detail/CVE-2025-59489
• https://unity.com/security/sept-2025-01/remediation
• https://www.cve.org/CVERecord?id=CVE-2025-59489
• https://blog.lapcom.com.hk/2025/10/21/update-unity-games-cve-2025-59489/
• https://www.ctfiot.com/277141.html

Related Vulnerabilities

• PoCCVE-2025-11953: React Native Community CLI - Unauthenticated OS Command Injection
• Nuclio /api/functions runtimeAttributes.repositories 命令执行漏洞（CVE-2026-52833）
• Wordpress wpForo Forum /community/recent/ SQL 注入漏洞（CVE-2026-1581）
• （CVE-2025-36604）Dell Unity OS命令注入漏洞
• InvisionCommunity存在代码注入漏洞(CVE-2025-47916)
• （CVE-2025-41658）CODESYS Runtime Toolkit默认文件权限配置漏洞导致敏感文件泄露
• PoCCVE-2010-1081: Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion
• PoCCVE-2019-14696: Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting
• PoCCVE-2019-3911: LabKey Server Community Edition <18.3.0 - Cross-Site Scripting
• PoCCVE-2019-3912: LabKey Server Community Edition <18.3.0 - Open Redirect
• PoCCVE-2020-13158: Artica Proxy Community Edition <4.30.000000 - Local File Inclusion
• PoCCVE-2021-40651: OS4Ed OpenSIS Community 8.0 - Local File Inclusion
• PoCCVE-2021-41381: Payara Micro Community 5.2021.6 Directory Traversal