11 matches found
CVE-2023-34965
CVE-2023-34965 SSPanel UIM è un sistema di gestione delle vendite di servizi multi-agenzia appositamente progettato per i protocolli Shadowsocks / V2Ray / Trojan. La versione di SSPanel-Uim precedente alla 2023.3 non limita l'accesso all'interfaccia /link/, il che può portare a una fuga di...
EUVD-2023-39004
Malicious code in bioql PyPI...
The vulnerability of the SSPanel-Uim software interface allows a perpetrator to access confidential information.
The vulnerability of the SSPanel-Uim software interface is related to improper authorization. Exploiting this vulnerability can allow attackers to access confidential information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
Information disclosure
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
SSPanel UIM 安全漏洞
SSPanel UIM is a multi-purpose proxy service sales management system designed for the Shadowsocks / V2Ray / Trojan protocols by the individual developer Anankke. A security vulnerability exists in SSPanel UIM version 2023.3, which stems from not restricting access to the interface, leading to the...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
PT-2023-3710 · Unknown · Sspanel-Uim
Name of the Vulnerable Software and Affected Versions: SSPanel-Uim version 2023.3 Description: The issue is related to improper authorization in the /link/ interface of the SSPanel-Uim software. This can allow an attacker to gain access to confidential information, potentially leading to a leak o...
CVE-2023-34965
SSPanel-Uim 2023.3 contains an information-disclosure issue caused by improper authorization: the /link/ interface is not access-restricted, allowing potential leakage of user data. Multiple sources (NVD/NVD-derived entries and vendor/analyst databases) confirm that the vulnerability stems from n...
