File upload vulnerability in the qr***.php file of the backend management system of Acme CMS

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. There is a file upload vulnerability in the qr.php file in the background management system of Acme CMS. Attackers can use the vulnerability to upload php file...

SQL Injection Vulnerability in Acme CMS Backend vi***_ed***.php

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the background vied.php of Acme CMS, which can be exploited by attackers to obtain sensitive databas...

File Upload Vulnerability in Acme CMS 2.0

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Acme CMS 2.0 suffers from a file upload vulnerability, which can be exploited by attackers to gain control of the web server...

mkcert: valid HTTPS certificates for localhost

or for any other names The web is moving to HTTPS, preventing network attackers from observing or injecting page contents. But HTTPS needs TLS certificates, and while deployment is increasingly a solved issue thanks to the ACME protocol and Let's Encrypt, development still mostly ends up happenin...

Moderate: Red Hat Security Advisory: httpd24 security, bug fix, and enhancement update

An update for httpd24-httpd, httpd24-nghttp2, and httpd24-curl is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

DEBIAN-CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

Design/Logic Flaw

ACME minihttpd before 1.30 lets remote users read arbitrary files...

UBUNTU-CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME mini_httpd before 1.30 is vulnerable to local file inclusion (LFI) via HTTP handling, enabling a remote attacker to read arbitrary files on the server. The issue is described as improper handling of HTTP GET requests with empty headers, facilitating file read access. Affected software: ACME ...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

PT-2018-14643

Name of the Vulnerable Software and Affected Versions acme mini httpd versions prior to 1.30 Description The issue allows remote users to read arbitrary files. Recommendations For versions prior to 1.30, update to version 1.30 or later to resolve the issue...

CVE-2018-18778: Exposure of Sensitive Information to an Unauthorized Actor

ACME minihttpd before 1.30 lets remote users read arbitrary files...

ACME mini_httpd Arbitrary File Read Vulnerability

ACME minihttpd is a small HTTP server from ACME Labs. A security vulnerability exists in ACME minihttpd versions prior to 1.30. A remote attacker can exploit this vulnerability to read arbitrary files...

Microsoft Adds Direct Trust for Let’s Encrypt

Microsoft has added direct trust for Let’s Encrypt certificates, meaning that all major browsers and operating systems, including Apple, Blackberry, Google, Microsoft, Mozilla and Oracle, now all directly trust the Let’s Encrypt root, ISRG Root X1. Let’s Encrypt provides free digital certificates...