References https://www.twcert.org.tw/tw/cp-132-7774-fbd01-1.html https://www.twcert.org.tw/newepaper/cp-151-7774-fbd01-3.html https://www.twcert.org.tw/en/cp-139-7775-8b991-2.html https://www.cve.org/CVERecord?id=CVE-2024-4300 https://cvefeed.io/vuln/detail/CVE-2024-4300 https://cve.imfht.com/product/FS-EZViewer(Web)?lang=en https://www.twcert.org.tw/en/lp-139-2-15-20.html
Related VulnerabilitiesPoCserverless-framework-config-exposure: Serverless Framework - Configuration ExposurePoCterraformrc-credentials-exposure: Terraform CLI Configuration - Credentials ExposurePoCterraform-tfstate-exposure: Terraform State - File ExposurePoCCVE-2026-89063: Bookly <=28.1 - IDOR Unauthenticated Sensitive Data AccessPoCmcp-streamable-http-exposure: MCP Streamable HTTP Server - Unauthenticated Initialize融易網路|GPM LIGHT - Sensitive Data ExposurePoCCVE-2026-6639: AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data ExposurePoCpowerdns-monitor-exposure: PowerDNS Authoritative Server Monitor - Unauthenticated ExposurePoCqdrant-telemetry-exposure: Qdrant - Telemetry ExposurePoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API ExposurePoClangflow-api-exposure: Langflow - Unauthenticated API ExposurePoCCVE-2026-42221: Nginx UI <= 2.3.7 - Unauthenticated Installer ExposurePoCgrafana-loki-api-exposure: Grafana Loki - Unauthenticated API Access