CVE-2024-9095

CVE-2024-9095 affects lunary-ai/lunary v1.4.28. The exposed /bigquery API route allows any logged-in user to create a Datastream to Google BigQuery and export the entire database, including sensitive data such as password hashes and secret API keys. The route is guarded by a config flag (config.D...

Huawei HarmonyOS and EMUI Security Bypass Vulnerability (CNVD-2023-61750)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security bypass vulnerability exists in Huawei...

SAP Solution Manager Missing Authentication Check Vulnerability (CNVD-2020-62928)

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...