地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Exposed API-key allows to control nightly builds of firmwares (█████████ & ████████)
Exposed API-key allows to control nightly builds of firmwares (█████████ & ████████)
信息泄露
/
违反安全设计原则(按标题归类)
/ #179986
厂商
Ubiquiti Inc.
严重程度
中危
赏金
—
弱点
违反安全设计原则(按标题归类)
研究员
@tripwire
披露日期
2017-10-09
资产
—
CVE
—
该报告还没有中文解读。
时间线
2016-11-03
报告提交
2017-10-09
公开披露
阅读 HackerOne 原文 ↗
作者 @tripwire · 版权归作者与 Ubiquiti Inc. 所有
同类报告
Indexing of urls on the "External link warning" pages discloses many vulnerable endpoints from the past and unlisted videos/photos
HackerOne · 2021-03-25
Authorization Token on PlayStation Network Leaks via postMessage function
PlayStation · 2020-11-21 · $1,000
Debug Deep Link Abuse Allows Repeated Forced Logout and Application Disruption
Yelp · 2026-08-13
Shopify.com Web Cache Deception vulnerability leads to personal information and CSRF tokens leakage
Shopify · 2021-10-21 · $800
Web Cache Deception vulnerability on algolia.com leads to personal information leakage
Algolia · 2023-04-19 · $400
previous token seems to work even though it does not verify email
WakaTime · 2019-11-27