统信UOS deepin-home-appstore-daemon 存在命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• http://www.nic.bjchyedu.cn/xxaq/aqtg/202404/P020240416555032924698.xlsx
• https://pro-store-packages.uniontech.com/appstore/pool/appstore/d/deepin-home-appstore-daemon/deepin-home-appstore-daemon_7.7.2.0005-1_amd64.deb
• https://ecology.chinauos.com/adaptidentification/knowledge/index.html?status=con2&type1=%E5%BA%94%E7%94%A8%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98&type2=%E5%85%B6%E4%BB%96%E5%BA%94%E7%94%A8%E9%97%AE%E9%A2%98&num=006718
• https://ecology.chinauos.com/adaptidentification/knowledge/index.html?status=con2&type1=%E5%BA%94%E7%94%A8%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98&type2=%E5%85%B6%E4%BB%96%E5%BA%94%E7%94%A8%E9%97%AE%E9%A2%98&num=007193
• https://github.com/linuxdeepin/developer-center/issues/10968

Related Vulnerabilities

• PoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal
• Ivanti Endpoint Manager Mobile /mifs/c/appstore/fob/3/5/sha256 命令执行漏洞（CVE-2026-1281/CVE-2026-1340）
• PoCCVE-2022-25356: Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection
• PoCdocker-daemon-exposed: Docker Daemon Exposed
• PoCnfs-daemon-service: NFS Service Daemon Should Be Disabled
• PoCcisco-finger-detect: Cisco Finger Daemon Detection
• PoCexposed-dockerd: Docker Daemon Exposed
• PoCerlang-daemon: Erlang Port Mapper Daemon
• 统信UOS deepin-debug-config 存在命令注入漏洞
• 统信uos installDriver 命令注入漏洞 可导致权限提升
• Microsoft Line Printer Daemon Service 资源管理错误漏洞
• VMware Authentication Daemon 弱口令漏洞