13 matches found
CVE-2023-34965
CVE-2023-34965 SSPanel UIM is a multi-purpose agency service sales management system specially designed for Shadowsocks / V2Ray / Trojan protocols. SSPanel-Uim version before 2023.3 does not restrict access to the /link/ interface,which can lead to a leak of user subscription information. Detail...
EUVD-2023-39004
Malicious code in bioql PyPI...
SSPanel-Uim Information Disclosure
The vulnerability of the SSPanel-Uim software interface is related to improper authorization. Exploiting this vulnerability can allow attackers to access confidential information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
Information disclosure
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
PT-2023-3710 · Unknown · Sspanel-Uim
Name of the Vulnerable Software and Affected Versions: SSPanel-Uim version 2023.3 Description: The issue is related to improper authorization in the /link/ interface of the SSPanel-Uim software. This can allow an attacker to gain access to confidential information, potentially leading to a leak o...
SSPanel UIM security vulnerabilities
SSPanel UIM is a multi-purpose proxy service sales management system designed for the Shadowsocks / V2Ray / Trojan protocols by the individual developer Anankke. A security vulnerability exists in SSPanel UIM version 2023.3, which stems from not restricting access to the interface, leading to the...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
CVE-2023-34965
SSPanel-Uim 2023.3 contains an information-disclosure issue caused by improper authorization: the /link/ interface is not access-restricted, allowing potential leakage of user data. Multiple sources (NVD/NVD-derived entries and vendor/analyst databases) confirm that the vulnerability stems from n...
