References https://nvd.nist.gov/vuln/detail/CVE-2025-13791 https://github.com/advisories/GHSA-r48m-vcgj-jw7q https://vuldb.com/?id.333795 https://access.redhat.com/security/cve/cve-2025-13791 https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-ZipSlip-1/report.md https://cve.imfht.com/detail/CVE-2025-13791 https://cert.kenet.or.ke/cve-2025-13791-scada-lts-project-import-zipprojectmanagerjava-commongethomedir-path-traversal https://app.opencve.io/cve/CVE-2025-13791 https://www.nsfocus.net/vulndb/130085 https://www.oscs1024.com/hd/MPS-jg3p-dlkz
Related VulnerabilitiesPoCclaude-settings-exposure: Claude Code Project Settings Exposure鸿翼文档管理系统 importNewBpmnDesignByIe 代码执行漏洞PoC蓝凌EIS智慧协同平台 /common/FI_SelEmp.aspx SQL 注入漏洞北京中科聚网一体化运营平台 /manage/tplresource/importVisualModuleImg 文件上传漏洞方向标邮件网关 /common/cgi/get_audit.cgi 命令执行漏洞关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告方向标邮件网关 /common/cgi/download.cgi 代码执行漏洞网神SecGate3600防火墙 /attachements/libcommon.log 信息泄露漏洞速达软件 /common/print/print!doSavePrintTpl.action Struts2 代码执行漏洞FOGProject /fog/management/export.php 信息泄露漏洞(CVE-2025-58443)PoCCVE-2026-47717: FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data DisclosurePoCCVE-2026-47670: DbGate - Remote Code Execution via Dynamic Import BypassTRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞(CVE-2025-27223)