Lucene search
+L

296 matches found

Packet Storm News
Packet Storm News
added 2025/12/17 12:00 a.m.10 views

Random Coding for Long-Range Continuous-Variable QKD

Quantum Key Distribution QKD schemes are key exchange protocols based on the physical properties of quantum channels. They avoid the computational-hardness assumptions that underlie the security of classical key exchange. Continuous-Variable QKD CVQKD, in contrast to qubit-based discrete-variable...

6.5AI score
SaveExploits0
HackRead
HackRead
added 2025/12/08 3:16 p.m.10 views

INE Earns G2 Winter 2026 Badges Across Global Markets

Cary, North Carolina, USA, 8th December 2025, CyberNewsWire...

7AI score
SaveExploits0
HackRead
HackRead
added 2025/12/05 3:24 p.m.10 views

Sprocket Security Earns Repeat Recognition in G2’s Winter 2025 Relationship Index for Penetration Testing

Madison, United States, 5th December 2025, CyberNewsWire...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/11/24 12:00 a.m.11 views

Processing Entangled Links into Secure Cryptographic Keys

The following paper presents a holistic approach to the processing of entangled links within entanglement based quantum key distribution protocols, whose security relies on the Bell inequality. We investigate the interactions, and the collective impact, of the whole processing chain on the final...

6.8AI score
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-2167

Malicious code in bioql PyPI...

4.8CVSS5AI score0.027EPSS
SaveExploits4References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-3092

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.00309EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-3106

Malicious code in bioql PyPI...

4.8CVSS5.2AI score0.00311EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2024-3523

Malicious code in bioql PyPI...

8.4CVSS6.3AI score0.00405EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-7004

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.01114EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-1186

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00672EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 8:56 a.m.11 views

CVE-2024-29686

Server-side Template Injection SSTI vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components. NOTE: the vendor disputes this because the payload could only be entered by a trusted user, such as the...

7.2CVSS8AI score0.01821EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:12 a.m.13 views

CVE-2024-54149

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Winter CMS prior to versions 1.2.7, 1.1.11, and 1.0.476 allow users with access to the CMS templates sections that modify Twig files to bypass the sandbox placed on Twig files and modify resources such...

8.4CVSS8.5AI score0.00405EPSS
SaveExploits0References1
Wiz blog
Wiz blog
added 2025/02/24 2:00 p.m.7 views

Wiz Named #1 CDR Solution by G2

Wiz was named the leader in the Winter 2025 CDR Grid Report, based on independent customer reviews...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 7:37 p.m.25 views

CVE-2022-39357

Winter is a free, open-source content management system based on the Laravel PHP framework. The Snowboard framework in versions 1.1.8, 1.1.9, and 1.2.0 is vulnerable to prototype pollution in the main Snowboard class as well as its plugin loader. The 1.0 branch of Winter is not affected, as it do...

9.8CVSS6.8AI score0.01114EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:52 a.m.9 views

CVE-2024-32003

wn-dusk-plugin Dusk plugin is a plugin which integrates Laravel Dusk browser testing into Winter CMS. The Dusk plugin provides some special routes as part of its testing framework to allow a browser environment such as headless Chrome to act as a user in the Backend or User plugin without having ...

8.8CVSS8.8AI score0.00672EPSS
SaveExploits0References1
Veracode
Veracode
added 2024/12/19 2:46 p.m.17 views

Sandbox Bypass

winter/wn-cms-module is vulnerable to Sandbox Bypass. The vulnerability is due to inadequate enforcement of the sandbox in Twig, allowing users with specific permissions to modify theme customization values, templates, or model data through Twig templates...

8.4CVSS7AI score0.00405EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2024/12/09 9:42 p.m.3 views

Incomplete List of Disallowed Inputs

Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs through the manipulation of Twig templates. An attacker can modify or delete data by bypassing the sandbox restrictions designed to limit template capabilities. Note: This is only exploitable if the...

8.4CVSS7AI score0.00405EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/09 9:15 p.m.58 views

CVE-2024-54149

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Winter CMS prior to versions 1.2.7, 1.1.11, and 1.0.476 allow users with access to the CMS templates sections that modify Twig files to bypass the sandbox placed on Twig files and modify resources such...

8.4CVSS0.00405EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/09 8:54 p.m.62 views

CVE-2024-54149 Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Winter CMS prior to versions 1.2.7, 1.1.11, and 1.0.476 allow users with access to the CMS templates sections that modify Twig files to bypass the sandbox placed on Twig files and modify resources such...

8.4CVSS0.00405EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/09 8:54 p.m.14 views

CVE-2024-54149 Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Winter CMS prior to versions 1.2.7, 1.1.11, and 1.0.476 allow users with access to the CMS templates sections that modify Twig files to bypass the sandbox placed on Twig files and modify resources such...

8.4CVSS7.3AI score0.00405EPSS
SaveExploits0References2
Rows per page
Query Builder