旭聯科技 eHRD CTMS - Authentication Bypass

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-8164-fe7c5-1.html
• https://www.twcert.org.tw/en/cp-139-8165-7da2f-2.html
• https://nvd.nist.gov/vuln/detail/CVE-2024-10438
• https://www.tenable.com/cve/CVE-2024-10438
• https://github.com/advisories/GHSA-6jh2-mqqc-57cx
• https://vuldb.com/vuln/281998
• https://cve.imfht.com/product/eHRD%20CTMS?lang=en

Related Vulnerabilities

• PoCCVE-2026-0692: BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization Bypass
• PoCCVE-2026-49468: LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass
• PoCCVE-2026-56681: 9router <=0.5.4 - Authentication Bypass
• PoCCVE-2026-89013: Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter
• PoCCVE-2026-80099: Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC Secret
• PoCCVE-2026-42018: JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass
• PoCCVE-2026-86218: N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution
• PoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass
• PoCCVE-2026-27960: OpenCTI < 6.9.13 - Authentication Bypass via User Impersonation
• PoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCE
• PoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA Bypass
• PoCCVE-2026-0650: OpenFlagr <= 1.1.18 - Authentication Bypass
• PoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass