https://xvshifu.github.io/xvsf/tags/%E4%BC%81%E4%B8%9A%E7%B3%BB%E7%BB%9F/Recent content in 企业系统 on xvsfhttps://xvshifu.github.io/xvsf/img/1.pnghttps://xvshifu.github.io/xvsf/img/1.pngHugo -- 0.160.1zh-cnWed, 07 Jan 2026 10:00:00 +0800https://xvshifu.github.io/xvsf/posts/%E8%8B%A5%E4%BE%9D4.8.1%E6%BC%8F%E6%B4%9E-ssti%E7%BB%95%E8%BF%87%E8%8E%B7%E5%8F%96shirokey%E8%87%B3rce/Wed, 07 Jan 2026 10:00:00 +0800https://xvshifu.github.io/xvsf/posts/%E8%8B%A5%E4%BE%9D4.8.1%E6%BC%8F%E6%B4%9E-ssti%E7%BB%95%E8%BF%87%E8%8E%B7%E5%8F%96shirokey%E8%87%B3rce/<h1 id="参考文章">参考文章：</h1> <p>若依最新版本4.8.1漏洞 SSTI绕过获取ShiroKey至RCE(全JAVA版本绕过，附带POC)</p> <p><a href="https://mp.weixin.qq.com/s/4yi0UOTgBCsGK6J8qSz8tQ">https://mp.weixin.qq.com/s/4yi0UOTgBCsGK6J8qSz8tQ</a></p> <p>某依最新版本稳定4.8.1 RCE (Thymeleaf模板注入绕过)</p>https://xvshifu.github.io/xvsf/posts/smartbi-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0qvd-2025-31926/Thu, 20 Nov 2025 14:00:00 +0800https://xvshifu.github.io/xvsf/posts/smartbi-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0qvd-2025-31926/Smartbi 远程代码执行漏洞复现(QVD-2025-31926)https://xvshifu.github.io/xvsf/posts/jsherp-2.3-%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/Wed, 20 Aug 2025 14:00:00 +0800https://xvshifu.github.io/xvsf/posts/jsherp-2.3-%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/华夏ERP 2.3 代码审计https://xvshifu.github.io/xvsf/posts/smartbi-v8.5-%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/Thu, 07 Aug 2025 16:00:00 +0800https://xvshifu.github.io/xvsf/posts/smartbi-v8.5-%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/Smartbi v8.5 代码审计https://xvshifu.github.io/xvsf/posts/smartbi-v8.5-%E7%8E%AF%E5%A2%83%E6%90%AD%E5%BB%BA/Thu, 07 Aug 2025 16:00:00 +0800https://xvshifu.github.io/xvsf/posts/smartbi-v8.5-%E7%8E%AF%E5%A2%83%E6%90%AD%E5%BB%BA/Smartbi v8.5 环境搭建