References https://www.twcert.org.tw/newepaper/cp-151-10501-a25a6-3.html https://www.twcert.org.tw/newepaper/lp-151-3-3-20.html https://www.twcert.org.tw/tw/lp-132-1-1-60.html https://cve.imfht.com/detail/CVE-2025-13161 https://cve.imfht.com/product/IQ-Support https://github.com/advisories/GHSA-g3q3-498c-hphc
Related VulnerabilitiesBeyondTrust Remote Support 代码执行漏洞（CVE-2026-1731）PoCwp-svg-support-fpd: WordPress SVG Support - Full Path DisclosurePoCCVE-2019-14950: WP Live Chat Support <= 8.0.27 — Stored Cross-Site Scripting西部数码 NAS sendLogToSupport.php 远程代码执行漏洞PoCCVE-2024-12356: Privileged Remote Access & Remote Support - Command InjectionPoCCVE-2011-5181: ClickDesk Live Support Live Chat 2.0 - Cross-Site ScriptingPoCCVE-2022-0781: WordPress Nirweb Support <2.8.2 - SQL InjectionPoCCVE-2023-1730: SupportCandy < 3.1.5 - Unauthenticated SQL InjectionPoCCVE-2023-40753: PHPJabbers Ticket Support Script v3.2 - Cross-Site ScriptingPoCCVE-2021-24878: SupportCandy < 2.2.7 - Reflected Cross-Site ScriptingPoCack-cluster-network-policies-disable: Enforced Cluster Support for Network Policies - DisabledPoCack-cluster-network-policies-missing: Cluster Support for Network Policies - MissingPoCazure-apim-http2-not-enabled: Azure API Management HTTP/2 Support Not Enabled