CVE-2026-15518

A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryController::storeFile of the file src/Http/Controllers/Admin/FileLibraryController.php of the component Media Library Insert Page. Such manipulation of the argument qqfilename leads to...

EUVD-2026-43260

A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryController::storeFile of the file src/Http/Controllers/Admin/FileLibraryController.php of the component Media Library Insert Page. Such manipulation of the argument qqfilename leads to...

CVE-2026-15518 AREA 17 Twill CMS Media Library Insert FileLibraryController.php storeFile unrestricted upload

A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryController::storeFile of the file src/Http/Controllers/Admin/FileLibraryController.php of the component Media Library Insert Page. Such manipulation of the argument qqfilename leads to...

CVE-2026-15518

A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryController::storeFile of the file src/Http/Controllers/Admin/FileLibraryController.php of the component Media Library Insert Page. Such manipulation of the argument qqfilename leads to...

CVE-2026-15518

AREA 17 Twill CMS

PT-2026-57586

Name of the Vulnerable Software and Affected Versions AREA 17 Twill CMS versions prior to 3.6.1 Description An unrestricted upload issue exists in the Media Library Insert Page component. A remote attacker can exploit this by manipulating the qqfilename argument within the...

China-Linked Twill Typhoon Uses Fake Apple and Yahoo Sites for Espionage

A new Darktrace report reveals how Chinese hackers use fake Apple and Yahoo sites and the FDMTP malware framework to spy on organisations...

EUVD-2021-2340

Malware in sbrugna...

Malicious code in test-mlw2-visto-twill (npm)

The package test-mlw2-visto-twill was found to contain malicious code...

MAL-2025-36585 Malicious code in test-mlw2-visto-twill (npm)

The package test-mlw2-visto-twill was found to contain malicious code...

CVE-2021-3932

twill is vulnerable to Cross-Site Request Forgery CSRF...

Twill Cross-Site Request Forgery Vulnerability

Twill is an open source Cms toolkit for Laravel. It is used to help developers quickly create intuitive, powerful and flexible custom management console. twill cross-site request forgery vulnerability, the vulnerability stems from the software in the login authentication process using get request...

GHSA-F99G-PG48-WRFC twill is vulnerable to Cross-Site Request Forgery (CSRF)

twill is vulnerable to Cross-Site Request Forgery CSRF...

twill is vulnerable to Cross-Site Request Forgery (CSRF)

twill is vulnerable to Cross-Site Request Forgery CSRF...

Cross-site Request Forgery (CSRF)

area17/twill is vulnerable to cross-site request forgery. The vulnerability exists due to the use of unsecure GET request which allows an attacker to use the script src="" to log out any user who went to the attacker website...

CVE-2021-3932

twill is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3932

twill is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

twill is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3932 Cross-Site Request Forgery (CSRF) in area17/twill

twill is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3932

Twill (Laravel-based CMS toolkit) is affected by a Cross-Site Request Forgery (CSRF) vulnerability identified as CVE-2021-3932. The vulnerability stems from using GET requests in the login/authentication flow instead of POST, enabling CSRF attacks that can be triggered by an attacker within a use...