Skip to content
Threat Feed
Subscribe

Vendor

Dromara

2 briefs RSS
high advisory

Hard-coded Cryptographic Key Vulnerability in Orion-visor

Orion-visor versions 2.5.7 and earlier contain a hard-coded cryptographic key within the HostKeyServiceImpl.encryptKey function, enabling potential remote compromise of encrypted host keys.

orion-visor vulnerability credential-exposure webserver
1t 1c
high advisory

Path Traversal in Dromara lamp-cloud

An unauthenticated remote path traversal vulnerability in Dromara lamp-cloud allows attackers to access unauthorized files via the FileAnyoneController component.

lamp-cloud
1r 1t 1c