References https://github.com/projectdiscovery/nuclei-templates/issues/3610 https://gist.github.com/PushkraJ99/a5ee8e266d15a0d288077a7518a9129d https://github.com/valaDevs/nuclei-backupfile-finder https://nuclei-templates.com/vulnerability/dast/ https://www.scribd.com/document/750003702/nykaa
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERPbackupexportall 接口存在任意文件读取漏洞PoCCVE-2026-12898: All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File WritePoCccm-detect: Clear-Com Core Configuration Manager Panel - DetectPoCweb-config: Web Configuration File - DetectPoCCVE-2024-56064: WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCEPoCzoneminder-system-log: ZoneMinder System Log - DetectUniFi Access /api/ucore/backup/export 命令执行漏洞(CVE-2025-52665)PoCmybb-installer: MyBB Installation Panel - DetectPoCosticket-installer: osTicket Installer Panel - DetectPoCCVE-2026-25527: changedetection.io <= 0.52.9 - Unauthenticated Path Traversalchangedetection.io /static/%2e%2e/flask_app.py 目录遍历漏洞(CVE-2026-25527)changedetection.io <= 0.53.9 存在路径遍历漏洞(CVE-2026-25527)指挥调度管理平台 /app/dbtool/db_backup_download.php 信息泄露漏洞