Lucene search
+L

3041 matches found

Cvelist
Cvelist
added 2025/04/27 11:56 p.m.28 views

CVE-2025-27937

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory 'Path Traversal'. If exploited, an arbitrary file in the affected product may be obtained by a remote attacker who can log in to the product...

7.1CVSS0.00671EPSS
SaveExploits0References3
CVE
CVE
added 2025/04/27 11:56 p.m.58 views

CVE-2025-27937

CVE-2025-27937 affects SIOS Quick Agent V3 and V2 (Windows). The issue is a path traversal vulnerability (improper limitation of a pathname to a restricted directory) in the product, allowing a remote attacker to obtain an arbitrary file in the affected product after logging in. Affected versions...

7.1CVSS7.1AI score0.00671EPSS
SaveExploits0References3
CVE
CVE
added 2025/04/27 11:56 p.m.84 views

CVE-2025-26692

The CVE-2025-26692 issue affects SIOS Quick Agent for Windows (V2/V3). The vulnerability is a Path Traversal flaw in the file upload (CWE-22) and also noted in related JVN data for file download, enabling a remote unauthenticated attacker with Windows system privileges to execute arbitrary code. ...

9.2CVSS7.6AI score0.00856EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/04/27 11:56 p.m.8 views

CVE-2025-26692

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory 'Path Traversal'. If exploited, arbitrary code may be executed by a remote unauthenticated attacker with the Windows system privilege where the product is running...

9.2CVSS8.3AI score0.00856EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/04/27 11:56 p.m.30 views

CVE-2025-26692

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory 'Path Traversal'. If exploited, arbitrary code may be executed by a remote unauthenticated attacker with the Windows system privilege where the product is running...

9.2CVSS0.00856EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.6 views

SIOS Technology Quick Agent 路径遍历漏洞

SIOS Technology Quick Agent is a component of a high availability and disaster recovery solution from SIOS Technology, Inc. that is used to monitor and protect business critical applications. A path traversal vulnerability exists in SIOS Technology Quick Agent V3 and V2, which stems from an...

7.1CVSS6.7AI score0.00671EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/04/27 12:0 a.m.24 views

PT-2025-18027 · Unknown · Quick Agent V3 +1

Name of the Vulnerable Software and Affected Versions: Quick Agent V3 and Quick Agent V2 affected versions not specified Description: The issue involves an improper limitation of a pathname to a restricted directory, commonly referred to as a Path Traversal issue. If exploited, an arbitrary file ...

7.1CVSS6.7AI score0.00671EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.7 views

SIOS Technology Quick Agent 安全漏洞

SIOS Technology Quick Agent is a component of a high availability and disaster recovery solution from SIOS Technology, Inc. that is used to monitor and protect business-critical applications. A security vulnerability exists in SIOS Technology Quick Agent V3 and V2, which stems from an improperly...

6.9CVSS6.1AI score0.00481EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/27 12:0 a.m.7 views

PT-2025-18028 · Unknown · Quick Agent V3 +1

Name of the Vulnerable Software and Affected Versions: Quick Agent V3 and Quick Agent V2 affected versions not specified Description: The issue is related to improper restriction of communication channels to intended endpoints. This could allow a remote unauthenticated attacker to attempt to log ...

6.9CVSS5.8AI score0.00481EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.8 views

SIOS Technology Quick Agent 路径遍历漏洞

SIOS Technology Quick Agent is a component of a high availability and disaster recovery solution from SIOS Technology, Inc. that is used to monitor and protect business-critical applications. A path traversal vulnerability exists in SIOS Technology Quick Agent V3 and V2, which stems from an...

9.2CVSS8.2AI score0.00856EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/04/27 12:0 a.m.9 views

PT-2025-18026 · Unknown · Quick Agent V3 +1

Name of the Vulnerable Software and Affected Versions: Quick Agent V3 affected versions not specified Quick Agent V2 affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, commonly known as a 'Path Traversal' vulnerability...

9.2CVSS8.3AI score0.00856EPSS
SaveExploits0References16
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/04/25 4:49 a.m.17 views

Multiple vulnerabilities in Quick Agent

Overview Quick Agent provided by SIOS Technology, Inc. is a Windows application for the following Ricoh MFPs' multifunction printers scan solutions. Quick Scan Easy FAX Speedoc Smart eco FAX Quick Agent contains multiple vulnerabilities listed below. Path traversal vulnerability in the file uploa...

9.2CVSS7.6AI score0.00856EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/04/25 12:0 a.m.28 views

JVN#82536398: Multiple vulnerabilities in Quick Agent

Quick Agent provided by SIOS Technology, Inc. is a Windows application for the following Ricoh MFPs' multifunction printers scan solutions. Quick Scan Easy FAX Speedoc Smart eco FAX Quick Agent contains multiple vulnerabilities listed below. Path traversal vulnerability in the file upload functio...

9.2CVSS7.6AI score0.00856EPSS
SaveExploits0
OSV
OSV
added 2025/04/18 3:52 p.m.23 views

CVE-2025-31118 NamelessMC Has Forum Reply Submission Time Limit Bypass

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, forum quick reply feature viewtopic.php does not implement any spam prevention mechanism. This allows authenticated users to continuously post replies without any time restriction,...

7.1CVSS6.6AI score
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/18 12:0 a.m.6 views

NamelessMC 资源管理错误漏洞

NamelessMC is a free, easy to use and powerful website software from the NamelessMC team. For your Minecraft server, which contains tons of features. A resource management error vulnerability exists in NamelessMC 2.1.4 and earlier versions, which stems from the lack of an anti-spam mechanism in t...

7.1CVSS6.3AI score0.00512EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/04/18 12:0 a.m.6 views

PT-2025-17311 · Unknown · Namelessmc

Name of the Vulnerable Software and Affected Versions: NamelessMC versions 2.1.4 and prior Description: The issue concerns the forum quick reply feature, specifically the view topic.php endpoint, which lacks a spam prevention mechanism. This allows authenticated users to post replies continuously...

7.1CVSS6.2AI score0.00512EPSS
SaveExploits1References11
Zero Day Initiative
Zero Day Initiative
added 2025/04/09 12:0 a.m.14 views

(Pwn2Own) Samsung Galaxy S24 Quick Share Directory Traversal Arbitrary File Write Vulnerability

This vulnerability allows network-adjacent attackers to create arbitrary files on affected installations of Samsung Galaxy S24. An attacker must first obtain the ability to perform activities on the target device. The specific flaw exists within the Quick Share application. The issue results from...

5.9CVSS6.4AI score0.00352EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/04/09 12:0 a.m.16 views

(Pwn2Own) Samsung Galaxy S24 Quick Share Insufficient UI Warning Arbitrary File Write Vulnerability

This vulnerability allows network-adjacent attackers to create arbitrary files on affected installations of Samsung Galaxy S24. An attacker must first obtain the ability to perform activities on the target device. The specific flaw exists within the Quick Share application. The user interface fai...

5.3CVSS6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/04/03 9:50 a.m.10 views

CVE-2025-30607

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Name.ly Quick Localization quick-localization allows Reflected XSS.This issue affects Quick Localization: from n/a through = 0.1.0...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2025/04/03 8:21 a.m.31 views

Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent

Cybersecurity researchers have disclosed details of a new vulnerability impacting Google's Quick Share data transfer utility for Windows that could be exploited to achieve a denial-of-service DoS or send arbitrary files to a target's device without their approval. The flaw, tracked as...

7.1CVSS7.8AI score0.0039EPSS
SaveExploits0
Rows per page
Query Builder