24 matches found
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform developed by F5 Technologies in the United States. It integrates functions such as network traffic management, application security management, and load balancing. There is a security vulnerability in F5 BIG-IP, which stems from unpublicized pages...
CVE-2025-33150
IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...
EUVD-2025-50805
IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...
CVE-2025-33150
IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...
CVE-2025-33150
IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...
CVE-2025-33150 IBM Cognos Analytics Certified Containers information disclosure
IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...
CVE-2025-33150 IBM Cognos Analytics Certified Containers information disclosure
IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...
CVE-2025-33150
CVE-2025-33150 affects IBM Cognos Analytics Certified Containers 12.1.0. The issue is information disclosure due to hidden pages that could reveal package parameter information. Public sources confirm the affected product/version and provide a remediation path: upgrade to 12.1.1. No exploit detai...
PT-2025-46187
Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics Certified Containers version 12.1.0 Description IBM Cognos Analytics Certified Containers version 12.1.0 may reveal package parameter information because of hidden pages. Recommendations At the moment, there is no...
EUVD-2024-52733
Malicious code in bioql PyPI...
EUVD-2024-19483
Malicious code in bioql PyPI...
CVE-2024-21872
The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter...
CVE-2024-55075
Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes...
CVE-2024-55075
Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes...
CVE-2024-21872
The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter...
Electrolink FM/DAB/TV Transmitter 安全漏洞
The Electrolink FM/DAB/TV Transmitter is a series of transmitters from Electrolink. A security vulnerability exists in the Electrolink FM/DAB/TV Transmitter that originates from an attacker being able to bypass authentication and modify cookies to access hidden pages...
PT-2024-19105 · Electrolink · Electrolink Fm/Dab/Tv Transmitter
Name of the Vulnerable Software and Affected Versions: Electrolink FM/DAB/TV Transmitter affected versions not specified Description: The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages, allowing more critical operations to the...
Electrolink FM/DAB/TV Transmitter SuperAdmin Hidden Functionality
Summary Since 1990 Electrolink has been dealing with design and manufacturing of advanced technologies for radio and television broadcasting. The most comprehensive products range includes: FM Transmitters, DAB Transmitters, TV Transmitters for analogue and digital multistandard operation, Bandpa...
KZTech / JatonTec / Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution Vulnerability
Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution Exploit Author: LiquidWorm Vendor Homepage: http://www.kzbtech.com http://www.jatontec.com https://www.neotel.mk Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page:...
Hidden pages' content can be viewed without permission using diffpages.action
If the id of a page is known by a user, that user can view the content of the page without having permissions to the space it is in. They need only construct the right URL. EG: Two spaces A and B Page with id 1 is in Space A Page with id 2 is in Space B User cannot see Space A User can see Space ...