Related Vulnerabilities关于U8cloud所有版本CodeSyncServlet接口存在任意文件下载漏洞的安全通告畅捷通 T+ POSSyncService.asmx 接口SQL注入漏洞宏景eHR /services/SynToADService XML 外部实体注入漏洞西软云XMS /ItfServerRS/rest/ideas/getresponseasync XML 外部实体注入漏洞心理云CT系统 /DataSyncManage/DataSync/GetGridJson 信息泄露漏洞PoC畅捷通T+ /tplus/GLSyncService.asmx/SimulationLoginNew SQL 注入漏洞TOTOLINK EX200 /cgi-bin/cstecgi.cgi NTPSyncWithHost 命令执行漏洞PoCsanhuismg-radius-rce: Synway SMG Gateway 9-2radius.php - Remote Command ExecutionPoCCVE-2026-1306: WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File UploadPoCapache-syncope-default-login: Apache Syncope - Default LoginPoCCVE-2024-13634: Post Sync Plugin <= 1.1 - Cross-Site ScriptingCisco Asyncos 整数溢出漏洞 可导致远程代码执行Synology BeeStation OS/DSM /webapi/entry.cgi 文件读取漏洞(CVE-2024-50629)