📄 UNI-PASS-Based Customs Systems Insecure Direct Object Reference

A critical security vulnerability has been identified in customs platforms based on UNI-PASS, where a publicly exposed API endpoint allows unauthorized access to sensitive documents without proper authentication or authorization checks. The affected endpoint commonly structured under /api/public/...

SQL Injection Vulnerability in Quamicro Technologies Warehouse Management System and Customs Management System

Wuxi Quamicro Technology Co., Ltd. is a high-tech enterprise that sends enterprise management software. SQL injection vulnerability exists in the warehouse management system and customs management system of Quamicro Technology. An attacker can utilize the vulnerability to obtain sensitive...