凌羣電腦 OMFLOW - Improper Authorization for Data Query Function

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/en/cp-139-8078-36fc9-2.html
• https://www.twcert.org.tw/tw/cp-132-8077-7a7c0-1.html
• https://www.twcert.org.tw/newepaper/cp-151-8077-7a7c0-3.html
• https://www.cve.org/CVERecord?id=CVE-2024-8780
• https://www.twcert.org.tw/tw/lp-132-1-4-60.html
• https://cve.imfht.com/product/OMFLOW

Related Vulnerabilities

• PoCCVE-2026-19092: Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function Invocation
• PoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass
• PoCCVE-2026-53595: FreeScout < 1.8.224 - Invite Hash Authorization Bypass
• 大华智慧园区综合管理平台 queryById 信息泄露漏洞
• PoCCVE-2025-14047: User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion
• PoCtp-link-wr840n-auth-bypass: TP-LINK WR840N v6 up to 0.9.1 4.16 - Improper Authentication
• PoCCVE-2026-34976: Dgraph <=v25.3.0 - Admin Mutation Missing Authorization
• PoCCVE-2024-55890: D-Tale <= 3.16.0 - Pre-Auth RCE via Pandas Query Injection
• PoCCVE-2026-1830: Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload
• PoCCVE-2026-22683: Windmill < 1.603.3 - Operator Authorization Bypass
• PoCCVE-2026-3335: Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload
• PoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCE