CVE-2023-34965

CVE-2023-34965 SSPanel UIMは、Shadowsocks / V2Ray / Trojanプロトコル向けに特別に設計された多目的代理サービス販売管理システムです。2023.3より前のバージョンのSSPanel-Uimでは、/link/インターフェースへのアクセスが制限されておらず、ユーザーのサブスクリプション情報が漏洩する可能性があります。 詳細：https://github.com/AgentY0/CVE-2023-34965/blob/main/CVE-2023-34965.pdf...

EUVD-2023-39004

Malicious code in bioql PyPI...

The vulnerability of the SSPanel-Uim software interface allows a perpetrator to access confidential information.

The vulnerability of the SSPanel-Uim software interface is related to improper authorization. Exploiting this vulnerability can allow attackers to access confidential information...

CVE-2023-34965

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...

CVE-2023-34965

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...

Information disclosure

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...

CVE-2023-34965

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...

PT-2023-3710 · Unknown · Sspanel-Uim

Name of the Vulnerable Software and Affected Versions: SSPanel-Uim version 2023.3 Description: The issue is related to improper authorization in the /link/ interface of the SSPanel-Uim software. This can allow an attacker to gain access to confidential information, potentially leading to a leak o...

SSPanel UIM 安全漏洞

SSPanel UIM is a multi-purpose proxy service sales management system designed for the Shadowsocks / V2Ray / Trojan protocols by the individual developer Anankke. A security vulnerability exists in SSPanel UIM version 2023.3, which stems from not restricting access to the interface, leading to the...

CVE-2023-34965

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...

CVE-2023-34965

SSPanel-Uim 2023.3 contains an information-disclosure issue caused by improper authorization: the /link/ interface is not access-restricted, allowing potential leakage of user data. Multiple sources (NVD/NVD-derived entries and vendor/analyst databases) confirm that the vulnerability stems from n...