Related VulnerabilitiesPoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - Exposure仁和兴业(深圳)软件有限公司仁和云ERP userresetPassword.action 存在任意账号密码重置漏洞PoCCVE-2026-0717: LottieFiles for Gutenberg <= 3.0.0 - Unauthenticated Settings DisclosurePoCCVE-2026-18963: Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials BypassmetaBase reset_password 接口存在sql注入漏洞9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-63732)PoCclaude-settings-exposure: Claude Code Project Settings ExposurePoCCVE-2025-29635: D-Link DIR-823X set_prohibiting - Command Injection9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-46339)WordPress YARPP /includes/yarpp_pro_set_display_types.php 权限绕过漏洞 (CVE-2024-43919)PoCCVE-2025-12841: WordPress Bookit < 2.5.1 - Unauthenticated Stripe Settings UpdateopenSIS-Classic /ResetUserInfo.php SQL 注入漏洞(CVE-2024-51211)BECN DATAGERRY /rest/users/1/settings/ 权限绕过漏洞(CVE-2024-46627)