沛盛資訊 OMICARD EDM行銷發送系統 - Path Traversal

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-7592-998bf-1.html
• https://www.twcert.org.tw/newepaper/cp-151-6374-1c6c9-3.html
• https://www.twcert.org.tw/newepaper/cp-151-7592-998bf-3.html
• https://www.twcert.org.tw/tw/cp-132-6371-05bdc-1.html
• https://github.com/advisories/GHSA-rfh6-j3v9-hr67
• https://nvd.nist.gov/vuln/detail/CVE-2023-48373
• https://avd.aliyun.com/detail?id=AVD-2022-32963
• https://avd.aliyun.com/detail?id=AVD-2022-35216
• https://zeroday.hitcon.org/vulnerability/ZD-2025-01502
• https://www.twcert.org.tw/newepaper/cp-151-6371-05bdc-3.html

Related Vulnerabilities

• PoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal
• PoCCVE-2026-44177: Kirby CMS 5.3.0-5.4.0 - Path Traversal
• PoCCVE-2024-1708: ConnectWise ScreenConnect <= 23.9.7 - Path Traversal
• PoCCVE-2026-54917: SeaweedFS <= 4.29 - Path Traversal File Write
• PoCCVE-2026-25895: FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File Write
• PoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCE
• PoCnodogsplash-lfi: Nodogsplash - Directory Traversal
• PoCCVE-2025-71324: Flowise - Path Traversal
• PoCCVE-2026-34908: UniFi OS - Authentication Bypass via Path Traversal (..%2f)
• PoCCVE-2026-53519: Nezha Dashboard < 2.0.13 - Path Traversal
• PoCCVE-2024-56511: DataEase < 2.10.4 - Authentication Bypass via Whitelist Path Traversal
• PoCCVE-2025-71334: Flowise - Path Traversal
• PoCCVE-2026-31831: Tautulli <= 2.16.1 - Path Traversal