CVE-2026-22782: Insertion of Sensitive Information into Log File

RustFS is a distributed object storage system built in Rust. From = 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. In...

Vulnerability in Ecstore of Shanghai Shangpai Network Technology Co.

Ecstore is based on a new generation of "e-commerce solution-driven engine" ECOS development of enterprise-class open source online store system , the system is based on the PHP language and MYSQL database framework for the development of cross-platform open-source program . Ltd. Ecstore has an...

ecstore app/dev/svinfo.php 信息泄露漏洞

No description provided by source...

ShopEx旗下产品ECSTORE 用户地址&联系方式泄露漏洞

简要描述： ShopEx旗下产品ECSTORE用户信息泄露 详细说明： 一开始是测试贝备网的，相关漏洞： WooYun: 贝备网某站越权影响用户敏感信息 然后发现这套系统不像贝备网自己写的，有点眼熟。于是找了关键词谷歌了一把 接着就发现：21cake也有一样问题， 相关漏洞：http://www.wooyun.org/bugs/wooyun-2010-0103731/trace/871e09c984979a433fdb3724361d4ba9 于是，就发现这绝对是一套通用系统…… 终于，发现了 水落石出，这是ECSTORE 于是就搜索：Ecstore demo 漏洞证明： img...

ECStore开源网店系统任意文件读取漏洞

简要描述： 后台模板编辑功能可越权查看系统文件 详细说明： file参数对../未做过滤，导致可以跨目录读取文件 测试url：http://shop.xxx.com/index.php/shopadmin/index.php?app=site&ctl=adminthemewidget&act=preview&theme=ecstore&file=../../../../../etc/passwd 漏洞证明：...

ECstore 本地文件包含漏洞

No description provided by source...

ECstore 本地文件包含漏洞

No description provided by source...

ShopE旗下产品ECstore任意文件遍历漏洞

简要描述： ShopE旗下产品ECstore任意文件遍历漏洞 详细说明： 官方主站： http://ecstore.shopex.cn/ 在官方宣传上有成功案例： http://mall.brands.com.tw/ec http://mall.brands.com.tw/ec/index.php/tools-staticPage.html?filename=../../../../../../../../../../etc/passwd 漏洞证明：...