4 matches found
Discourse 信息泄露漏洞
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an information disclosure vulnerability that stems from non-employee users having access to read receipt informati...
CVE-2026-32620: Exposure of Sensitive Information to an Unauthorized Actor
Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, non-staff users could access read receipt information for staff-only posts they weren't supposed to see. No post content w...
Override Access Vulnerability in BuyGift.com App (Android Version)
BuyGift.com APP is a mobile client that provides users with online shopping services. A vulnerability exists in BuyGift.com APP Android version that allows an attacker to gain unauthorized access to other people's receipt information...
B2C open source online shop system Yuncart newest vulnerabilities 0day-vulnerability warning-the black bar safety net
Vulnerability type: xss Application for return of Brief code: $problem = striptags$POST"problem"; $way = trim$POST"way"; $receivername = trim$POST"name"; $receiverprovince = trim$POST"province"; $receivercity = trim$POST"city"; $receiverdistrict = trim$POST"district"; $receiveraddress =...