Bus Pass Management System Information Disclosure Vulnerability

Bus Pass Management System is a bus pass management system. v1.0 of Bus Pass Management System is vulnerable to information disclosure, which stems from a configuration error in the network system or product during operation. The vulnerability can be exploited by an attacker to view the applicati...

Bus Pass Management System 安全漏洞

Bus Pass Management System is a bus pass management system. v1.0 of Bus Pass Management System is vulnerable to information disclosure, which stems from a configuration error in the network system or product during operation. The vulnerability can be exploited by an attacker to view the applicati...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2021-87010)

IBM InfoSphere Information Server is a data integration platform that includes a range of products that enable you to understand, cleanse, monitor, transform, and transfer data, as well as collaborate to bridge the gap between business and IT. A security vulnerability exists in IBM InfoSphere...

Huawei Smartphone 配置错误漏洞

Huawei Emui is a mobile operating system developed based on Android.Magic Ui is a mobile operating system developed based on Android. Huawei Emui and Magic UI have security vulnerabilities that can be exploited by attackers to compromise service confidentiality...

Redmine Information Disclosure Vulnerability (CNVD-2022-10738)

Redmine is an open source web-based project management and defect tracking tool. The product provides project management, issue tracking, and role-based access control, among other features.A security vulnerability exists in Redmine, which stems from a configuration or other error in the operatio...

Redmine 信息泄露漏洞

Redmine is an open source web-based project management and defect tracking tool. The product provides project management, issue tracking, and role-based access control, among other features.A security vulnerability exists in Redmine, which stems from a configuration or other error in the operatio...

Twitch data breach resulted from server configuration error

By Deeba Ahmed Twitch Data Breach took place a couple of days ago when an anonymous hacker published a torrent file with 125 GB worth of data on the 4chan messaging board. This is a post from HackRead.com Read the original post: Twitch data breach resulted from server configuration error...

GitLab 信息泄露漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to view a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in all GitLa...

Apple macOS 信息泄露漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. An information disclosure vulnerability previously existed in Apple macOS Monterey 12.0.1. The vulnerability stems from an error in the configuration, etc. of a networked system or product during operation. A...

CVE-2020-18748

Cross Site Scripting XSS in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221...

Cross site scripting

Cross Site Scripting XSS in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221...

CVE-2020-18748

Cross Site Scripting XSS in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221...

Huawei HarmonyOS 配置错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS has a security vulnerability that can be exploited by local attackers to elevate privileges...

Z-BlogPHP Information Disclosure Vulnerability (CNVD-2021-43494)

Z-BlogPHP is an open source PHP-based blogging system for the Z-blog community. An information disclosure vulnerability exists in Z-BlogPHP, which stems from a configuration error in Open Redirect in Z-BlogPHP v1.5.2 and earlier versions. The vulnerability can be exploited to obtain sensitive...

Micro Focus Secure API Manager 日志信息泄露漏洞

Secure API Manager is a complete solution from Micro Focus USA for creating, managing, maintaining, and monitoring the APIs you use in your IT environment.It provides a repository where you can store and manage all the APIs you use. An information disclosure vulnerability exists in Micro Focus...

IBM Jazz Foundation 配置错误漏洞

IBM Jazz Foundation is a software development collaboration platform for IBM Rational products. An information disclosure vulnerability exists in IBM Jazz Foundation. An attacker could exploit this vulnerability to obtain sensitive information from error messages returned in a browser, which coul...

Sifchain: Wrong implementation of Telegram link on the main page for PC users

Summary: I found that there is a broken link for your telegram group. When a PC user click on telegram icon on your main page he is redirected to tg://resolve?domain=sifchain instead of https://t.me/sifchain due to some errors in configurationcoding. That idea is good for mobile view not deskptop...

CVE-2021-21728

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...

Design/Logic Flaw

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...

CVE-2021-21728

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...