Lucene search
K

86 matches found

Tenable Nessus
Tenable Nessus
added 2025/11/10 12:0 a.m.2 views

Gladinet CentreStack/Triofox < 16.10.10408.56683 Local File Inclusion

Gladinet CentreStack/Triofox versions prior to 16.10.10408.56683 are vulnerable to a Local File Inclusion LFI vulnerability. An unauthenticated attacker could exploit this issue to read arbitrary files on the affected system, potentially leading to information disclosure. The vulnerability exists...

7.5CVSS6.6AI score0.67647EPSS
Exploits4References2
Tenable Nessus
Tenable Nessus
added 2025/11/07 12:0 a.m.7 views

Gladinet CentreStack <= 16.7.10368.56560 Local File Inclusion

Gladinet CentreStack through 16.7.10368.56560 fixed in 16.10.10408.56683 contain an unauthenticated Local File I nclusion LFI vulnerability CVE-2025-11371 that allows an attacker to read sensitive files notably Web.config without authentication; attackers observed exploiting this in the wild have...

9.8CVSS9AI score0.85362EPSS
Exploits8References2
The Hacker News
The Hacker News
added 2025/11/05 6:12 a.m.8 views

CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added two security flaws impacting Gladinet and Control Web Panel CWP to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerabilities in question are listed below ...

9.8CVSS8.9AI score0.67647EPSS
Exploits8
CISA
CISA
added 2025/11/04 12:0 p.m.7 views

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-11371link is external Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability CVE-2025-48703link is external CWP...

9CVSS7.2AI score0.67647EPSS
In wildExploits7References7
CISA KEV Catalog
CISA KEV Catalog
added 2025/11/04 12:0 a.m.5 views

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files...

7.5CVSS6.8AI score0.67647EPSS
In wildExploits4
RedhatCVE
RedhatCVE
added 2025/10/10 7:17 p.m.3 views

CVE-2025-11371

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

6.2CVSS6.7AI score0.67647EPSS
Exploits4References1
GithubExploit
GithubExploit
added 2025/10/10 10:26 a.m.209 views

Exploit for CVE-2025-11371

CVE-2025-11371 In the default installation and configuration...

6.1CVSS6.6AI score0.67647EPSS
Exploits4
The Hacker News
The Hacker News
added 2025/10/10 9:34 a.m.10 views

From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox Vulnerability

Cybersecurity company Huntress said it has observed active in-the-wild exploitation of an unpatched security flaw impacting Gladinet CentreStack and TrioFox products. The zero-day vulnerability, tracked as CVE-2025-11371 CVSS score: 6.1, is an unauthenticated local file inclusion bug that allows...

9.8CVSS10AI score0.85362EPSS
Exploits8
EUVD
EUVD
added 2025/10/09 6:30 p.m.1 views

EUVD-2025-33408

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

6.1CVSS6.3AI score0.67647EPSS
Exploits4References2
NVD
NVD
added 2025/10/09 5:15 p.m.1 views

CVE-2025-11371

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

7.5CVSS0.67647EPSS
Exploits4References3
OSV
OSV
added 2025/10/09 5:15 p.m.0 views

CVE-2025-11371

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

7.5CVSS5.7AI score0.67647EPSS
Exploits4References3
ATTACKERKB
ATTACKERKB
added 2025/10/09 4:50 p.m.2 views

CVE-2025-11371

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

7.5CVSS5.4AI score0.67647EPSS
In wildExploits4References4
Vulnrichment
Vulnrichment
added 2025/10/09 4:50 p.m.2 views

CVE-2025-11371 Gladinet CentreStack and TrioFox Local File Inclusion Flaw

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

6.4AI score0.67647EPSS
Exploits4References1
Cvelist
Cvelist
added 2025/10/09 4:50 p.m.5 views

CVE-2025-11371 Gladinet CentreStack and TrioFox Local File Inclusion Flaw

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

0.67647EPSS
Exploits4References1
CVE
CVE
added 2025/10/09 4:50 p.m.28 views

CVE-2025-11371

CVE-2025-11371 is an unauthenticated Local File Inclusion (LFI) exists in Gladinet CentreStack and TrioFox. Connected documents describe an LFI affecting CentreStack/TrioFox via the default installation, enabling reading of server files through the /storage/t.dn endpoint by abusing an unsafely sa...

7.5CVSS6.4AI score0.67647EPSS
In wildExploits4References3Affected Software2
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.2 views

PT-2025-41413

Name of the Vulnerable Software and Affected Versions Gladinet CentreStack and Triofox versions prior to and including 16.7.10368.56560 Description Gladinet CentreStack and Triofox are affected by an unauthenticated Local File Inclusion flaw. This allows unintended disclosure of system files and,...

7.5CVSS8.1AI score0.67647EPSS
Exploits4References90
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.1 views

Gladinet CentreStack和Gladinet TrioFox 安全漏洞

Gladinet CentreStack and Gladinet TrioFox are both products of Gladinet, Inc. of the U.S. Gladinet CentreStack is a premier mobile access and secure sharing solution. Provides self-hosted cloud storage.Gladinet TrioFox is a hosted version of the platform for cloud services. A security vulnerabili...

7.5CVSS6.6AI score0.67647EPSS
Exploits4References1
VulnCheck KEV
VulnCheck KEV
added 2025/10/09 12:0 a.m.2 views

VulnCheck KEV: CVE-2025-11371

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

7.5CVSS5.7AI score0.67647EPSS
In wildExploits4References143
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-30622

Malicious code in bioql PyPI...

7.2CVSS7AI score0.01647EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-30621

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.02003EPSS
Exploits1References2
Rows per page
Query Builder