ASUS Download Master - Reflected XSS

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://localh0st.run/post/asus-downloadmaster-1/
• https://www.twcert.org.tw/en/cp-139-7862-e43e4-2.html
• https://www.twcert.org.tw/tw/cp-132-7863-49a2d-1.html
• https://stack.watch/product/asus/download-master/
• https://cve.imfht.com/product/Download%20Master?lang=en
• https://avd.aliyun.com/detail?id=AVD-2024-31159

Related Vulnerabilities

• PoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSS
• PoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting
• PoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site Scripting
• PoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting
• PoCCVE-2026-81199: MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure
• 上海小羚羊软件股份有限公司小羚羊ERP系统downloadView存在任意文件读取漏洞
• 仁和兴业（深圳）软件有限公司仁和云ERP attachmentdownloadAttachment 接口存在任意文件读取漏洞
• PoCCVE-2026-49069: WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site Scripting
• PoCCVE-2026-64638: WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)
• 玉帛软件仓库管理系统DownloadFile存在任意文件读取漏洞
• PoCCVE-2026-52774: YesWiki Bazar Widget - Reflected XSS via 'id' Parameter
• 安科瑞EMS企业微电网能效管理平台 /SubstationWEBV2/main/appDownload 文件读取漏洞
• 云连ERP管理系统 /gateway/download!download.action 代码执行漏洞