<![CDATA[Mrxn's Blog]]> https://mrxn.net/ zh-cn 用友U8+ EIS服务 APIProxyHandler(proxy) 未授权SSRF漏洞 https://mrxn.net/jswz/yonyou-APIProxyHandler-ssrf.html [该文章已设置加密]

]]> Sat, 03 Oct 2026 09:37:00 +0800 Mrxn https://mrxn.net/jswz/yonyou-APIProxyHandler-ssrf.html PowerJob最新版v5.1.2 friend-process接口未授权远程代码执行漏洞（CVE-2026-75429） https://mrxn.net/jswz/powerjob-friend-process-rce.html [该文章已设置加密]

]]> Thu, 24 Sep 2026 22:04:55 +0800 Mrxn https://mrxn.net/jswz/powerjob-friend-process-rce.html CRMEB系统最新版v6.0.0 JWT默认密钥认证绕过RCE漏洞 https://mrxn.net/jswz/crmeb-jwt-default-key-auth-bypass-rce.html [该文章已设置加密]

]]> Wed, 23 Sep 2026 08:00:00 +0800 Mrxn https://mrxn.net/jswz/crmeb-jwt-default-key-auth-bypass-rce.html CRMEB系统最新版v6.0.0 RoutineCI_preview方法命令注入漏洞 https://mrxn.net/jswz/crmeb-adminapi-routineci-preview-rce.html [该文章已设置加密]

]]> Tue, 22 Sep 2026 08:00:00 +0800 Mrxn https://mrxn.net/jswz/crmeb-adminapi-routineci-preview-rce.html CRMEB系统最新版v6.0.0save_basics接口任意文件读取漏洞 https://mrxn.net/jswz/crmeb-adminapi-agent-config-save_basics-arbitrary-file-read.html [该文章已设置加密]

]]> Mon, 21 Sep 2026 08:00:00 +0800 Mrxn https://mrxn.net/jswz/crmeb-adminapi-agent-config-save_basics-arbitrary-file-read.html CRMEB系统最新版v6.0.0theme_import接口zip解压RCE漏洞 https://mrxn.net/jswz/crmeb-adminapi-theme-import-zip-rce.html [该文章已设置加密]

]]> Sun, 20 Sep 2026 08:00:00 +0800 Mrxn https://mrxn.net/jswz/crmeb-adminapi-theme-import-zip-rce.html ChanCMS-v3.3.0存在SQL注入漏洞 https://mrxn.net/jswz/ChanCMS-search-key-sqli.html [该文章已设置加密]

]]> Fri, 18 Sep 2026 19:38:39 +0800 PjcKta0R https://mrxn.net/jswz/ChanCMS-search-key-sqli.html ChanCMS-v3.3.0存在远程代码执行漏洞 https://mrxn.net/jswz/ChanCMS-collect-getArticle-rce.html [该文章已设置加密]

]]> Fri, 18 Sep 2026 19:11:47 +0800 PjcKta0R https://mrxn.net/jswz/ChanCMS-collect-getArticle-rce.html 正方数字化校园门户存在SQL注入 https://mrxn.net/jswz/zfsoft-dwr-CalendarNewsAjax-getlatestNewsList-sqli.html [该文章已设置加密]

]]> Fri, 18 Sep 2026 15:45:44 +0800 PjcKta0R https://mrxn.net/jswz/zfsoft-dwr-CalendarNewsAjax-getlatestNewsList-sqli.html CRMEB系统最新版v6.0.0 image_base64接口phar反序列化RCE漏洞 https://mrxn.net/jswz/crmeb-image_base64-phar-deserialization-pop-chain-rce.html [该文章已设置加密]

]]> Fri, 18 Sep 2026 08:02:00 +0800 Mrxn https://mrxn.net/jswz/crmeb-image_base64-phar-deserialization-pop-chain-rce.html CRMEB系统最新版v6.0.0 remote_register接口未认证资金注入+账户接管漏洞 https://mrxn.net/jswz/crmeb-v13-remote-register-unauth-fund-injection.html [该文章已设置加密]

]]> Fri, 18 Sep 2026 08:00:00 +0800 Mrxn https://mrxn.net/jswz/crmeb-v13-remote-register-unauth-fund-injection.html 索贝融媒体 TestController接口reUploadBase64 SQL注入漏洞 https://mrxn.net/jswz/sobey-mcheditor-testcontroller-reuploadbase64-sqli.html [该文章已设置加密]

]]> Thu, 17 Sep 2026 20:04:25 +0800 Mrxn https://mrxn.net/jswz/sobey-mcheditor-testcontroller-reuploadbase64-sqli.html 索贝融媒体 callback接口任意文件写入致远程代码执行漏洞 https://mrxn.net/jswz/sobey-mcheditor-energy-callback-arbitrary-file-write-rce.html [该文章已设置加密]

]]> Thu, 17 Sep 2026 08:21:00 +0800 Mrxn https://mrxn.net/jswz/sobey-mcheditor-energy-callback-arbitrary-file-write-rce.html 索贝融媒体 TestController接口readAndinterpret表达式注入未认证RCE与SSRF漏洞 https://mrxn.net/jswz/sobey-mcheditor-testcontroller-readandinterpret-expression-injection-rce.html [该文章已设置加密]

]]> Thu, 10 Sep 2026 08:30:40 +0800 Mrxn https://mrxn.net/jswz/sobey-mcheditor-testcontroller-readandinterpret-expression-injection-rce.html 索贝融媒体 /mch/lzy/getArticleList 信息泄露漏洞 https://mrxn.net/jswz/sobey-lzy-getArticleList-user-leak.html [该文章已设置加密]

]]> Thu, 10 Sep 2026 08:28:06 +0800 Mrxn https://mrxn.net/jswz/sobey-lzy-getArticleList-user-leak.html