References https://cve.imfht.com/detail/CVE-2025-8756 https://www.nsfocus.net/vulndb/131343 https://www.tenable.com/cve/CVE-2025-8756 https://nvd.nist.gov/vuln/detail/CVE-2025-8756 https://www.cve.org/CVERecord?id=CVE-2025-8756 https://www.cvedetails.com/version/1977150/Tduckcloud-Tduck-platform-5.1.html https://vuldb.com/vuln/319261 https://github.com/advisories/GHSA-p65m-fhpg-ph97
Related VulnerabilitiesHepta Platforms|Heptabase - Stored Cross-Site ScriptingServiceNow-AI-Platform /assessment_thanks.do 代码执行漏洞(CVE-2026-6875)PoCCVE-2026-6875: ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCEXWiki Platform /xwiki/bin/skin/ 目录遍历漏洞(CVE-2026-34151)Progress WhatsUp Gold /NmConsole/Platform/PerformanceMonitorErrors/HasErrors SQL 注入漏洞(CVE-2024-6670)PoCCVE-2026-20253: Splunk Enterprise & Cloud Platform - Unrestricted File UploadHepta Platforms|Heptabase - Exposed Dangerous Method or Function万户 ezOFFICE /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../platform/bpm/work_flow/operate/wf_relation.jsp SQL 注入漏洞PoCzqnb-educationcloud-exposure: ZhongQing Education Cloud Platform - Information Exposure华夏 ERP /jshERP-boot/platformConfig/getPlatform/..;/..;/..;/jshERP-boot/user/getAllList 信息泄露漏洞红海云 /RedseaPlatform/submitStWasAssessDept/StWasAssessDept.mob SQL 注入漏洞PoCCVE-2025-10353: Melis Technology Melis Platform - Unrestricted File Upload & Remote Code ExecutionPoCCVE-2026-24128: XWiki Platform Distribution Flavor Main - Cross-Site Scripting