References https://github.com/adysec/POC/blob/main/wpoc/%E7%94%B5%E5%8A%9B%E7%B3%BB%E7%BB%9F%E6%8E%A7%E5%88%B6%E8%BD%AF%E4%BB%B6/Altenergy%E7%94%B5%E5%8A%9B%E7%B3%BB%E7%BB%9F%E6%8E%A7%E5%88%B6%E8%BD%AF%E4%BB%B6status_zigbee%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://avd.aliyun.com/detail?id=AVD-2024-11305 https://blog.csdn.net/2303_77176437/article/details/143885112 https://cn-sec.com/archives/3420125.html https://nvd.nist.gov/vuln/detail/CVE-2024-11305 https://pentest-tools.com/vulnerabilities-exploits/altenergy-power-control-software-sql-injection_25823 https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11305.yaml https://cvefeed.io/vuln/detail/CVE-2024-11305 https://vuldb.com/?id.284914 https://github.com/iSee857/CVE-PoC/blob/main/Altenergy(CVE-2024-11305).py
Related VulnerabilitiesPoCCVE-2026-86206: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header SpoofingPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginJoomShaper SP LMS /index.php?option=com_splms&view=cart 文件上传漏洞(CVE-2026-48909)畅捷通T+系统 AccountExtendRuleController接口处存在反序列化漏洞金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞金和OA /c6/JHSoft.Web.CostControl/BudgetExecution/VouchUpdate.aspx SQL 注入漏洞普华科技-PowerPMS系统未授权敏感信息泄露漏洞PowerJob 存在信息泄露漏洞 (CVE-2025-11580)普华PowerPMS系统越权数据泄露漏洞NukeViet /index.php 服务器端请求伪造漏洞(CVE-2026-55372)天问物业ERP系统 /HM/M_Main/HC/DataGetControl.aspx SQL 注入漏洞技嘉科技|Gigabyte Control Center - Improper Access ControlPoCopcache-control-panel: Opcache control Panel - Unauthenticated Access