References https://www.twcert.org.tw/tw/cp-132-7936-f6381-1.html https://www.twcert.org.tw/newepaper/cp-151-7936-f6381-3.html https://www.cvedetails.com/cve/CVE-2024-6744/ https://cve.imfht.com/detail/CVE-2024-6744 https://www.twcert.org.tw/tw/lp-132-1-14-20.html
Related VulnerabilitiesPoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code ExecutionPoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization英華達｜全家寶 Cloud - Insecure Direct Object Reference云连ERP管理系统 /gateway/download!download.action 代码执行漏洞广联达OA /Mail/Services/EmailAccountOrgUserService.asmx/GetUserEmailByOrgEmails XML 外部实体注入漏洞PoCCVE-2021-24916: WordPress Qubely < 1.8.6 - Unauthenticated Email SendingPoCCVE-2023-7327: Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File ReadPoCCVE-2026-46725: TYPO3 ceselector Extension - Insecure DeserializationWordPress WebStack主题 /wp-admin/admin-ajax.php 文件上传漏洞（CVE-2026-1555）CentreStack 本地文件包含漏洞(CVE-2025-11371)沛盛資訊｜OMICARD EDM - Insecure Direct Object Reference金財通商務科技｜Service Center - Insecure Direct Object Reference