References https://www.twcert.org.tw/tw/cp-132-7894-aebd8-1.html https://www.twcert.org.tw/en/cp-139-7895-80dac-2.html https://www.cve.org/CVERecord?id=CVE-2024-6295 https://www.twcert.org.tw/newepaper/cp-151-7894-aebd8-3.html https://www.twcert.org.tw/tw/lp-132-1-14-20.html
Related Vulnerabilities大华智慧园区综合管理平台 backStoragePlan_deleteAll SQL注入漏洞PoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization英華達｜全家寶 Cloud - Insecure Direct Object ReferencePoCCVE-2026-46725: TYPO3 ceselector Extension - Insecure Deserialization沛盛資訊｜OMICARD EDM - Insecure Direct Object Reference金財通商務科技｜Service Center - Insecure Direct Object Reference日躍科技｜App好校通 - Insecure Direct Object ReferencePoCCVE-2026-2699: Progress ShareFile Storage Zones Controller - Authentication BypassProgress ShareFile Storage Zones Controller /ConfigService/Admin.aspx 权限绕过漏洞（CVE-2026-2699）技嘉｜Performance Library - Insecure DeserializationGladinet CentreStack & Triofox /storage/filesvr.dn 文件读取漏洞（CVE-2025-14611）东胜物流软件 /Storage/Storage/DQStorageData SQL 注入漏洞