References https://mrxn.net/jswz/trwfe-uploadWxFile-rce.html https://cn-sec.com/archives/4936606.html https://www.cnvd.org.cn/flaw/show/CNVD-2025-01244 https://mrxn.net/jswz/trwfe-addUpFile-upload-rce.html https://cn-sec.com/archives/3127703.html https://mrxn.net/jswz/trwfe-uploadWxFile-rce.html
Related VulnerabilitiesPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginFlowise /api/v1/loginmethod 未授权访问漏洞（CVE-2026-56270）PoClitellm-default-login: LiteLLM - Default LoginPoCnet-vision-default-login: Net Vision UPS Monitor - Default LoginPoC3xui-default-login: 3X-UI - Default LoginPoC泛微E-cology10 /papi/passport/appnew/login/appLogin 未授权访问漏洞WordPress /wp-login.php 跨站脚本攻击漏洞（CVE-2026-64638）ZKTeco BioTime 平台 /accounts/login 默认口令漏洞PoCsentinel-default-login: Alibaba Sentinel - Default LoginPoC9router-default-login: 9Router - Default LoginPoCNginxWebUI /adminPage/login/getAuth 命令执行漏洞天锐绿盾审批系统 /trwfe/login.jsp/..;/thirdSystemConfig/findSingConfigPage.do SQL 注入漏洞Datart /api/v1/users/login 默认口令漏洞