全訊電腦 校務行政系統 - Exposure of Sensitive Information

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-8415-853e0-1.html
• https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/85fd8b28-0bcd-4b5d-ace3-1e02db60f62f/
• https://www.cvedetails.com/cve/CVE-2025-1144/
• https://www.appsecure.security/vulnerability-database/cve-2025-1144/
• https://net.nthu.edu.tw/netsys/mailing:announcement:20250211_01?do=export_pdf
• https://www.ncyu.edu.tw/pims/Subject/Detail/216989?nodeId=57817
• https://olis.kmu.edu.tw/index.php/en-gb/notice/79-security/3892-ana20250212a

Related Vulnerabilities

• PoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API Exposure
• PoClangflow-api-exposure: Langflow - Unauthenticated API Exposure
• PoCCVE-2026-42221: Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure
• PoCgrafana-loki-api-exposure: Grafana Loki - Unauthenticated API Access
• PoCvictoriametrics-vmagent-api-exposure: VictoriaMetrics vmagent - Unauthenticated Targets Exposure
• PoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - Exposure
• PoCnuget-config-exposure: NuGet.config Package Source Credentials - Exposure
• PoCpypirc-credentials-exposure: Python .pypirc Credentials - Exposure
• PoCCVE-2026-11801: WPAdverts <= 2.3.2 - Information Disclosure
• PoCfastly-debug-headers: Fastly CDN Debug Headers Exposure
• PoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information Disclosure
• PoCCVE-2026-27796: Homarr < 1.54.0 - Information Disclosure
• PoCclaude-code-agents: Claude Code Subagent Configuration - Exposure