浪潮ClusterEngine alarmConfig 前台RCE漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization
• PoCCVE-2026-3001: Gutenverse Plugin <= 3.4.6 - Cross-Site Scripting
• PoCCVE-2025-6389: Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func
• PoCCVE-2026-3296: Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection
• PoCNginxWebUI /adminPage/login/getAuth 命令执行漏洞
• PoCNginxWebUI /Adminpage/Conf/loadOrg 文件读取漏洞
• NginxWebUI /Api/Nginx/runNginxCmd 命令执行漏洞
• NginxWebUI /Adminpage/Remote/cmdOver 命令执行漏洞
• Stripe Payment Plugin for WooCommerce /wc-api/WT_Stripe/ SQL 注入漏洞（CVE-2024-0705）
• NGINX ngx_http_rewrite_module 堆缓冲区溢出漏洞
• PoCCVE-2025-48157: WordPress Formality Plugin <= 1.5.9 - Local File Inclusion
• PoCCVE-2025-58226: WordPress 3D FlipBook Plugin <= 1.16.17 - Sensitive Information Exposure
• PoCCVE-2026-40308: My Calendar WordPress Plugin - Information Disclosure