References https://github.com/adysec/POC/blob/main/wpoc/%E7%94%B5%E5%8A%9B%E7%B3%BB%E7%BB%9F%E6%8E%A7%E5%88%B6%E8%BD%AF%E4%BB%B6/Altenergy%E7%94%B5%E5%8A%9B%E7%B3%BB%E7%BB%9F%E6%8E%A7%E5%88%B6%E8%BD%AF%E4%BB%B6status_zigbee%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://avd.aliyun.com/detail?id=AVD-2024-11305 https://blog.csdn.net/2303_77176437/article/details/143885112 https://cn-sec.com/archives/3420125.html https://nvd.nist.gov/vuln/detail/CVE-2024-11305 https://pentest-tools.com/vulnerabilities-exploits/altenergy-power-control-software-sql-injection_25823 https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11305.yaml https://cvefeed.io/vuln/detail/CVE-2024-11305 https://vuldb.com/?id.284914 https://github.com/iSee857/CVE-PoC/blob/main/Altenergy(CVE-2024-11305).py
Related VulnerabilitiesPoCCVE-2025-34033: Blue Angel Software Suite (5V Technologies) - OS Command InjectionPoCCVE-2026-49060: Hippoo Mobile App for WooCommerce - Broken Access ControlPoCpowerdns-monitor-exposure: PowerDNS Authoritative Server Monitor - Unauthenticated ExposurePoCCVE-2026-86206: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing華擎科技|ASRock Polychrome SYNC/RGB software utility - 存在2個漏洞PoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginJoomShaper SP LMS /index.php?option=com_splms&view=cart 文件上传漏洞(CVE-2026-48909)畅捷通T+系统 AccountExtendRuleController接口处存在反序列化漏洞金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞金和OA /c6/JHSoft.Web.CostControl/BudgetExecution/VouchUpdate.aspx SQL 注入漏洞普华科技-PowerPMS系统未授权敏感信息泄露漏洞PowerJob 存在信息泄露漏洞 (CVE-2025-11580)普华PowerPMS系统越权数据泄露漏洞