(CVE-2025-8790) Portabilis i-Educar API Endpoint 参数授权验证漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-8790
• https://vuldb.com/vuln/319318
• https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8790.md
• https://cve.imfht.com/detail/CVE-2025-8790
• https://vulners.com/cve/CVE-2025-8790
• https://www.vulmon.com/vulnerabilitydetails?qid=CVE-2025-8790&scoretype=vmscore

Related Vulnerabilities

• PoCCVE-2026-4810: Google ADK-Python - Unauthenticated Builder Endpoint
• PoCCVE-2026-30824: Flowise - NVIDIA NIM Endpoints Missing Authentication
• PoCIvanti Endpoint Manager /RemoteControlAuth/api/Auth 权限绕过漏洞（CVE-2026-1603）
• Ivanti Endpoint Manager 权限管理不当漏洞
• PoCCVE-2026-1603: Ivanti Endpoint Manager - Authentication Bypass
• Ivanti Endpoint Manager Mobile /mifs/c/appstore/fob/3/5/sha256 命令执行漏洞（CVE-2026-1281/CVE-2026-1340）
• Ivanti Endpoint Manager Mobile 未授权 代码注入漏洞
• PoCgrafana-metrics-exposure: Grafana Metrics Endpoint - Information Disclosure
• （CVE-2025-8786）Portabilis i-Diario 1.5.0及更早版本跨站脚本（XSS）漏洞
• （CVE-2025-8785）Portabilis i-Educar 2.9及之前版本跨站脚本漏洞
• （CVE-2025-8789）Portabilis i-Educar API Endpoint模块远程授权绕过漏洞
• （CVE-2025-8787）Portabilis i-Diario 活动记录组件跨站脚本漏洞