Vulnerability List
漏洞列表
用戶所提交的漏洞列表。
全部
-
大千綜合醫院 白箱測試 - SQL Injection Bypass login + 後台存在弱密碼
- HZD Code:ZD-2026-00815
- Risk:高
- Status:公開
- Vendor: 衛生福利部 a.k.a. 衛生福利部
- Date:2026/06/06
-
大千綜合醫院 CVE-2024-4577 RCE
- HZD Code:ZD-2026-00814
- Risk:嚴重
- Status:公開
- Vendor: 衛生福利部 a.k.a. 衛生福利部
- Date:2026/06/06
-
某單位 Bitmarkd 使用 float64 比對 difficulty，允許同值但較寬鬆的 compact target 通過 PoW 驗證
- HZD Code:ZD-2026-00813
- Risk:高
- Status:審核中
- Date:2026/06/04
-
Zerojudge rce
- HZD Code:ZD-2026-00812
- Risk:嚴重
- Status:公開
- Vendor: ZeroJudge a.k.a. ZeroJudge
- Date:2026/06/04
-
某單位 tickets event routes authorize query eventId but read/update path id
- HZD Code:ZD-2026-00811
- Risk:中
- Status:審核中
- Date:2026/06/03
-
某單位 tickets reorder authorizes query.eventId but reorders another event tickets
- HZD Code:ZD-2026-00810
- Risk:中
- Status:審核中
- Date:2026/06/03
-
某單位 tickets invitation-code update can rebind a code to another event ticket
- HZD Code:ZD-2026-00809
- Risk:中
- Status:審核中
- Date:2026/06/03
-
某單位 tickets webhook management routes authorize one event ID but operate on path eventId
- HZD Code:ZD-2026-00808
- Risk:中
- Status:審核中
- Date:2026/06/03
-
某單位 tickets ticket analytics route lacks event-scoped access check
- HZD Code:ZD-2026-00807
- Risk:中
- Status:審核中
- Date:2026/06/03
-
某單位 tickets event form-field handlers continue after failed event access
- HZD Code:ZD-2026-00806
- Risk:中
- Status:審核中
- Date:2026/06/03