普萊德科技交換器設備 - Swctrl service exchanges weakly encoded passwords

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-8059-bde5f-1.html
• https://www.twcert.org.tw/en/cp-139-8060-f3955-2.html
• https://nvd.nist.gov/vuln/detail/CVE-2024-8455
• https://tp2rc.tanet.edu.tw/node/914
• https://www.twcert.org.tw/tw/lp-132-1-11-20.html
• https://db.gcve.eu/vuln/cve-2024-8455
• https://www.twcert.org.tw/newepaper/cp-151-8059-bde5f-3.html

Related Vulnerabilities

• PoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCE
• 畅捷通 T+ POSSyncService.asmx 接口SQL注入漏洞
• PoCmonitorr-file-upload: Monitorr Services Configuration - Arbitrary File Upload
• ServiceNow-AI-Platform /assessment_thanks.do 代码执行漏洞（CVE-2026-6875）
• PoCCVE-2026-6875: ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE
• 金蝶EAS /ormrpc/services/BSHService 代码执行漏洞
• 用友U8Cloud /ServiceDispatcherServlet 文件上传漏洞
• 用友 U8cloud /service/XChangeServlet SQL 注入漏洞
• 关于NC系统BapAnaRepDefService的sql注入漏洞的安全通告
• 时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞
• 广联达OA /Mail/Services/EmailAccountOrgUserService.asmx/GetUserEmailByOrgEmails XML 外部实体注入漏洞
• Nezha /api/v1/server/1/service 信息泄露漏洞（CVE-2026-49397）
• 广联达OA /Org/service/Service.asmx/GetChangeUsers 信息泄露漏洞