Description
金蝶云星空系统中，/Kingdee.BOS.WebApi.ServicesStub.AuthService.ValidateLoginInfo.common.kdsvc 接口存在命令执行漏洞，该接口在处理用户请求参数时缺乏有效的安全校验，攻击者可构造恶意请求触发服务器执行任意系统命令，从而实现远程命令执行。
金蝶云星空 /Kingdee.BOS.WebApi.ServicesStub.AuthService.ValidateLoginInfo.common.kdsvc 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zhousa.com/archives/89836.html
https://github.com/adysec/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6%E4%BA%91-%E6%98%9F%E7%A9%BAServiceGateway%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/Domren/articles/18735535
https://nvd.nist.gov/vuln/detail/CVE-2025-6761
https://www.secrss.com/articles/55737
https://www.lmboke.com/archives/jin-die-yun-xing-kong-fan-xu-lie-hua-yuan-cheng-dai-ma-zhi-xing-lou-dong
https://zhuanlan.zhihu.com/p/644669676