廣達電腦 QOCA aim - Authorization Bypass

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-8336-aa03b-1.html
• https://nvd.nist.gov/vuln/detail/CVE-2024-13040
• https://cc.nchu.edu.tw/p/404-1000-1509.php?Lang=zh-tw
• https://www.twcert.org.tw/en/cp-139-8337-7899f-2.html
• https://www.dreamjtech.com/9813/
• https://net.nthu.edu.tw/netsys/en:mailing:announcement:20250102_02?do=export_pdf
• https://www.sentinelone.com/vulnerability-database/cve-2025-15235/
• https://ic2.asia.edu.tw/zh_tw/more_announcement/-%E8%B3%87%E8%A8%8A%E7%99%BC%E5%B1%95%E8%99%95-%E5%85%AC%E5%91%8A-%E8%BD%89%E7%9F%A5%C2%A0-ANA%E4%BA%8B%E4%BB%B6%E5%96%AE%E9%80%9A%E7%9F%A5-TACERT-ANA-2024123101125858-%E6%BC%8F%E6%B4%9E%E9%A0%90%E8%AD%A6-%E5%BB%A3%E9%81%94%E9%9B%BB%E8%85%A6%C2%A0QOCA-aim-Authorization-Bypass-65410035

Related Vulnerabilities

• PoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass
• PoCCVE-2026-27960: OpenCTI < 6.9.13 - Authentication Bypass via User Impersonation
• PoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCE
• PoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA Bypass
• PoCCVE-2026-0650: OpenFlagr <= 1.1.18 - Authentication Bypass
• PoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass
• PoCCVE-2026-28411: WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()
• PoCCVE-2026-30849: MantisBT < 2.28.1 - SOAP API Authentication Bypass
• PoCCVE-2026-41452: Krayin CRM < 2.2.1 - Installer Authentication Bypass
• PoCCVE-2026-48558: SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass
• PoCCVE-2026-53595: FreeScout < 1.8.224 - Invite Hash Authorization Bypass
• PoCCVE-2026-60105: Monsta FTP <= 2.14.4 - Unauthenticated SSRF via IPv6 Blocklist Bypass
• PoCCVE-2026-62382: PasswordPusher v1.45.11-v2.9.5 - Unauthenticated Anonymous Push Deletion via Ownership Bypass