脸爱云一脸通智慧平台 /View/Operators/addOperators.aspx 信息泄露漏洞

2024-11-29 脸爱云一脸通智慧平台 PoC No

Description

脸爱云一脸通智慧管理平台是一套功能强大，运行稳定，操作简单方便，用户界面美观，轻松统计数据的一脸通系统。无需安装，只需在后台配置即可在浏览器登录。脸爱云一脸通智慧平台存在一个信息泄露漏洞，攻击者可以通过addOperators接口读取服务器上的敏感信息，例如账号密码和用户角色等，可能导致敏感信息泄露和系统安全性降低。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

https://cn-sec.com/archives/2736289.html
https://github.com/Sec-Fork/POC-20250106/blob/main/%E8%84%B8%E7%88%B1%E4%BA%91%E4%B8%80%E8%84%B8%E9%80%9A%E6%99%BA%E6%85%A7%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0/%E8%84%B8%E7%88%B1%E4%BA%91%E4%B8%80%E8%84%B8%E9%80%9A%E6%99%BA%E6%85%A7%E5%B9%B3%E5%8F%B0SelOperators%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md
https://www.ddpoc.com/DVB-2024-6976.html
https://github.com/adysec/POC/blob/main/wpoc/%E8%84%B8%E7%88%B1%E4%BA%91%E4%B8%80%E8%84%B8%E9%80%9A%E6%99%BA%E6%85%A7%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0/%E8%84%B8%E7%88%B1%E4%BA%91%E4%B8%80%E8%84%B8%E9%80%9A%E6%99%BA%E6%85%A7%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E5%AD%98%E5%9C%A8downloads.aspx%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md
https://www.ddpoc.com/DVB-2024-6951.html
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E8%84%B8%E7%88%B1%E4%BA%91%E4%B8%80%E8%84%B8%E9%80%9A%E6%99%BA%E6%85%A7%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0/%E8%84%B8%E7%88%B1%E4%BA%91%20%E4%B8%80%E8%84%B8%E9%80%9A%E6%99%BA%E6%85%A7%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E6%B7%BB%E5%8A%A0%E6%BC%8F%E6%B4%9E.md

Description

PoC

References

Related Vulnerabilities