瑞賦科技 IOT Wall - Broken Access Control

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-6962-34ac1-1.html
• https://www.twcert.org.tw/newepaper/cp-151-6962-34ac1-3.html
• https://net-edu.ylc.edu.tw/News_Content.aspx?n=108691&sms=55948&s=187477
• https://www.twcert.org.tw/tw/lp-132-1-7-60.html
• https://cve.imfht.com/detail/CVE-2023-25017
• https://www.rifartek.com/
• https://www.twcert.org.tw/newepaper/cp-151-6963-7d2ee-3.html

Related Vulnerabilities

• PoCCVE-2026-61560: GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access
• PoCCVE-2026-89063: Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access
• PoCCVE-2026-49060: Hippoo Mobile App for WooCommerce - Broken Access Control
• PoCCVE-2026-82456: argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Access
• PoCCVE-2026-59177: ESPHome Device Builder <1.0.10 - Unauthenticated Dashboard Access
• PoCCVE-2026-81578: PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-Direct
• PoCCVE-2026-82329: JFrog Artifactory Access Blank Join Key Authentication Bypass
• PoCCVE-2026-86206: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing
• PoCCVE-2026-86426: LibreNMS <= 26.7.0 - Unauthenticated API Access
• PoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default Login
• PoCgrafana-loki-api-exposure: Grafana Loki - Unauthenticated API Access
• 大华-智慧园区综合管理平台 updateAccessChannelByVisit SQL注入漏洞
• 畅捷通T+系统 AccountExtendRuleController接口处存在反序列化漏洞