Strapi CMS 3.0.0-beta命令执行(CVE-2019-18818,CVE-2019-19609)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ddpoc.com/DVB-2021-2756.html

Related Vulnerabilities

• PoCCVE-2026-0692: BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization Bypass
• PoCCVE-2026-40281: Gotenberg <= 8.30.1 - Remote Code Execution
• PoCCVE-2026-86242: Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch
• QAnything /api/local_doc_qa/upload_files 文件上传漏洞（CVE-2026-88533）
• Netbox-Docker /api/status/ 默认口令漏洞（CVE-2023-27573）
• PoCCVE-2025-11452: Asgaros Forum < 3.2.0 - SQL Injection
• PoCCVE-2025-34033: Blue Angel Software Suite (5V Technologies) - OS Command Injection
• PoCCVE-2025-62593: Ray < 2.52.0 - Remote Code Execution
• PoCCVE-2025-68273: Signal K Server <= 2.18.0 - Information Disclosure
• PoCCVE-2026-25703: NeuVector - Information Disclosure
• PoCCVE-2026-89013: Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter
• PoCCVE-2026-89063: Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access
• PoCCVE-2026-6639: AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data Exposure