Related VulnerabilitiesPoCCVE-2026-62382: PasswordPusher v1.45.11-v2.9.5 - Unauthenticated Anonymous Push Deletion via Ownership BypassGitea /api/v1/repos/diffpatch 代码执行漏洞（CVE-2026-60004）Flowise /api/v1/loginmethod 未授权访问漏洞（CVE-2026-56270）PoCCVE-2022-1281: Photo Gallery WordPress v1.6.3 - SQL InjectionPoCpackage-json: NPM package.json DisclosurePoCbentoml-open-redirect: BentoML v1.3.9 - Open RedirectKestra /api/v1/main/flows/configs 命令执行漏洞（CVE-2026-53576）Langflow /api/v1/custom_component 代码执行漏洞（CVE-2024-37014）Flowise /api/v1/chatflows 文件上传漏洞（CVE-2025-71334）Open WebUI /api/v1/retrieval/process/web 服务器端请求伪造漏洞（CVE-2026-70485）Gogs /api/v1/orgs/:orgname/teams 信息泄露漏洞（CVE-2026-52815）大华ICC智能物联网管理平台 /evo-runs/v1.0/receive/response/file 文件读取漏洞Datart /api/v1/users/login 默认口令漏洞