聯合線上 udn News App - Sensitive Information Exposure

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-7892-aafd2-1.html
• https://www.twcert.org.tw/newepaper/cp-151-7892-aafd2-3.html
• https://www.twcert.org.tw/en/cp-139-7893-43ecd-2.html
• https://cve.org/CVERecord?id=CVE-2024-6294
• https://hackmd.io/@9dCJrgb6QHGd8dRfgHO0zg/SJClMN2IA
• https://www.twcert.org.tw/tw/lp-132-1-14-20.html

Related Vulnerabilities

• PoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API Exposure
• PoClangflow-api-exposure: Langflow - Unauthenticated API Exposure
• PoCCVE-2026-42221: Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure
• PoCgrafana-loki-api-exposure: Grafana Loki - Unauthenticated API Access
• PoCvictoriametrics-vmagent-api-exposure: VictoriaMetrics vmagent - Unauthenticated Targets Exposure
• PoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - Exposure
• PoCnuget-config-exposure: NuGet.config Package Source Credentials - Exposure
• PoCpypirc-credentials-exposure: Python .pypirc Credentials - Exposure
• PoCCVE-2026-11801: WPAdverts <= 2.3.2 - Information Disclosure
• PoCfastly-debug-headers: Fastly CDN Debug Headers Exposure
• PoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information Disclosure
• PoCCVE-2026-27796: Homarr < 1.54.0 - Information Disclosure
• PoCclaude-code-agents: Claude Code Subagent Configuration - Exposure