CKAN security vulnerabilities

CKAN is an open source Dms data management system. Used to power data centers and data portals. A security vulnerability exists in CKAN versions prior to 5.4.1, which stems from the fact that if a user does not set a custom value via an environment variable in the .env file, a key is shared betwe...

Xiaomi MIUI Information Disclosure Vulnerability (CNVD-2022-81250)

Xiaomi MIUI is an Android-based smartphone operating system developed by Xiaomi Technology Xiaomi, a Chinese company. Xiaomi MIUI has a security vulnerability, which is due to the lack of parameter verification in some phones, which can be used by attackers to forge a specific identity and lead t...

CVE-2020-14122

Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity due to the lack of parameter verification, resulting in user information leakage...

Design/Logic Flaw

Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity due to the lack of parameter verification, resulting in user information leakage...

CVE-2020-14122: Insufficient Verification of Data Authenticity

Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity due to the lack of parameter verification, resulting in user information leakage...

PT-2022-8556

Name of the Vulnerable Software and Affected Versions Xiaomi phones affected versions not specified Description The issue concerns information leakage due to the lack of parameter verification, potentially allowing the forgery of a specific identity. This could result in user information leakage...

TIM Office social software has a logic flaw vulnerability

Tim is an office social software app from Tencent that supports QQ and WeChat login. TIM office social software has a logic flaw vulnerability, which can be exploited by attackers to forge other people's identity to carry out activities...

Insecure Authentication

authmagic-timerange-stateless-core uses insecure authentication. When comparing signatures in the JSON web token JWT and refreshToken, the package does not verify the JWT token sent by user before reissuing a new token, allowing an attacker to forge a user's identity by modifying the payload and...

Logic Flaw Vulnerability in Intelligent Gateway of Beijing BiNian Technology Co.

Smart Gateway is a multi-service converged gateway that integrates the features of wireless controller AC, router and firewall independently developed by Beijing Beyond Technology Co. A logic flaw vulnerability exists in the Intelligent Gateway of Beijing BiNian Technology Co. An attacker can for...