Apache Dubbo Admin 权限绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://isecurity.huawei.com/security/wiki/ips/detail?threatId=745300

Related Vulnerabilities

• PoCApache Cocoon /xmlui/themes/Mirage2 目录遍历漏洞
• 中科商软云连ERP /admin/session!ajaxList.action 未授权访问漏洞
• Apache Kafka UI /smartfilters/testexecutions 代码执行漏洞（CVE-2026-78166）
• PoCCVE-2026-80099: Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC Secret
• PoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code Execution
• PoCapache-livy-logs: Apache Livy - Logs Exposed
• PoCnacos-v3-auth-scope-bypass: Nacos 3.x - Unauthenticated Admin Takeover
• Apache Log4j2 远程代码执行漏洞（CVE-2021-44228）
• tpadmin存在远程代码执行漏洞(CVE-2026-2113)
• PoCCVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution
• PoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - Exposure
• PoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX Router