https://x7peeps.com/tags/OnlyOffice/index.htmlHugozh-CNMon, 22 Jun 2026 16:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/03-%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/%E5%8D%8F%E4%BD%9C%E4%B8%8E%E5%8A%9E%E5%85%AC%E5%B9%B3%E5%8F%B0/%E5%8D%8F%E4%BD%9C%E4%B8%8E%E5%8A%9E%E5%85%AC%E5%B9%B3%E5%8F%B0%E9%AB%98%E5%8D%B1%E6%94%BB%E5%87%BB%E9%93%BE%E4%B8%93%E9%A2%98/index.htmlMon, 22 Jun 2026 16:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/03-%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/%E5%8D%8F%E4%BD%9C%E4%B8%8E%E5%8A%9E%E5%85%AC%E5%B9%B3%E5%8F%B0/%E5%8D%8F%E4%BD%9C%E4%B8%8E%E5%8A%9E%E5%85%AC%E5%B9%B3%E5%8F%B0%E9%AB%98%E5%8D%B1%E6%94%BB%E5%87%BB%E9%93%BE%E4%B8%93%E9%A2%98/index.html围绕 Zimbra、Nextcloud、OnlyOffice、Roundcube/Rainloop 等协作与办公平台的高危漏洞链，覆盖文件写入 RCE、SAML 认证绕过、JWT 伪造、路径穿越等攻击手法，含完整 PoC 代码、Nuclei 模板、自动化利用脚本与防守建议。