聯合線上 udn News App - Sensitive Information Exposure

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-7892-aafd2-1.html
• https://www.twcert.org.tw/newepaper/cp-151-7892-aafd2-3.html
• https://www.twcert.org.tw/en/cp-139-7893-43ecd-2.html
• https://cve.org/CVERecord?id=CVE-2024-6294
• https://hackmd.io/@9dCJrgb6QHGd8dRfgHO0zg/SJClMN2IA
• https://www.twcert.org.tw/tw/lp-132-1-14-20.html

Related Vulnerabilities

• PoCserverless-framework-config-exposure: Serverless Framework - Configuration Exposure
• PoCterraformrc-credentials-exposure: Terraform CLI Configuration - Credentials Exposure
• PoCterraform-tfstate-exposure: Terraform State - File Exposure
• PoCCVE-2025-68273: Signal K Server <= 2.18.0 - Information Disclosure
• PoCCVE-2026-25703: NeuVector - Information Disclosure
• PoCCVE-2026-89063: Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access
• PoCmcp-streamable-http-exposure: MCP Streamable HTTP Server - Unauthenticated Initialize
• 融易網路｜GPM LIGHT - Sensitive Data Exposure
• PoCCVE-2026-6639: AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data Exposure
• PoCpowerdns-monitor-exposure: PowerDNS Authoritative Server Monitor - Unauthenticated Exposure
• PoCqdrant-telemetry-exposure: Qdrant - Telemetry Exposure
• PoCCVE-2026-13153: Essential Blocks < 6.4.0 - Information Disclosure
• PoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API Exposure