CVE-2025-46294: Exposure of Sensitive Information to an Unauthorized Actor

To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows registry. This prevents attackers from using the tilde character to discover hidden files and directories. This...

ALPINE-CVE-2021-43302

Read out-of-bounds in PJSUA API when calling pjsuarecordercreate. An attacker-controlled 'filename' argument may cause an out-of-bounds read when the filename is shorter than 4 characters...

phpyun 某漏洞可导致被脱裤

简要描述： rt 详细说明： https://images.seebug.org/upload/201502/091901402eced8dfc9c75ab0fb6f29e24b27dc7a.png 用cmd跳到php云的/data/backup/目录 然后再输出 “dir /x”执行 可以看到短文件名 http://localhost/phpyun/data/backup/PHPYUN1.SQL PHPYUN此处数字递增.SQL 0-N 手工都可以找出来 漏洞证明： Windows short filenames...

Discuz全版本数据库备份文件泄漏

简要描述： Windows short filenames造成的Discuz数据库备份文件泄漏. 只适用于跑在windows下的apache下的DZ! 不仅仅是DZ存在这个问题哦. 详细说明： 看详细之前请去自行了解下Windows short filenames这个漏洞的详情! 首先.了解DZ的童鞋都知道.DZ的备份目录文件名 /fourmdata/backup/或者是/data/backup/ 备份成功后是不会是在默认的backup下的.会生成一个新的文件夹 命名规则为backup6位随机数字6位随机字母/ 然后让我们来数一数 backup 刚好6位.童鞋们.发现啥了么?...