ICEFlow VPN Disclosure Detection

ICEFlow VPN internal log file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ICEFlow VPN internal log file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ICEFlow VPN Disclosure Detection',...

Information Disclosure Vulnerability in IceFlow VPN Router

ICEFLOW VPN is a new generation of IPSEC-based Layer 3 intelligent router products developed by Shanghai Bingfeng Networks in response to the actual needs of modern enterprise and public utility users. There is an information leakage vulnerability in IceFlow VPN Router. Attackers can use the...

冰峰VPN /log/system.log 敏感信息泄漏漏洞

由于“ICEFLOW VPN Router”设备产品存在各种日志文件未授权访问可导致系统敏感信息泄漏。（包括登录成功后的session值） 系统日志http://url/log/system.log VPN日志http://url/log/vpn.log 移动用户日志http://url/log/mobile.log 防火墙日志http://url/log/firewall.log 访问日志http://url/log/access.log 告警日志http://url/log/warn.log 错误日志http://url/log/error.log...