cve-2026-23550-poc

CVE-2026-23550 PoC 一个针对 CVE-2026-23550 的小型 Bash 测试工具。它会请求受影响的 WordPress 模块化连接器登录端点，检查是否颁发了 wordpressloggedin Cookie，并尝试确认对管理后台的访问权限。 警告： 仅将此工具用于您拥有或已获得明确授权测试的系统。未经授权的安全测试可能违法，并可能造成破坏。 环境要求 Bash 4+ curl grep mktemp 用法 使脚本可执行： chmod +x cve-2026-23550-poc.sh 扫描默认本地目标（http://localhost:8080）：...

EUVD-2026-58620

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachable anonymously. The endpoint never sets a failure code, so its outcome is signalled entirely by the response message and...

CVE-2026-73630

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and reachable anonymously. The endpoint does not return a failure code; its outcome is signalled solely by the response message and th...