Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the storagesvc HTTP router, which registers the /v1/archive and /v1/archives endpoints without authentication or authorization checks. An attacker can enumerate, download, upload, or dele...

Automox Alive Automox Agent 安全特征问题漏洞

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. An Access Control Error vulnerability exists in versions prior to Automox Agent 31 that stems from the use of inadequately protected S3 bucket endpoints to store sensitive files, which can be...