35 matches found
EUVD-2025-6782
Malicious code in bioql PyPI...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
The Jenkins Zoho QEngine Plugin versions 1.0.29.vfa_cc23396502 and earlier are vulnerable because the QEngine API Key form field is not masked. This lack of masking increases the risk that an attacker could observe and capture the API key. At this time, no specific version containing a fix is ide...
Jenkins Zoho QEngine Plugin 安全漏洞
Jenkins Zoho QEngine Plugin is a Jenkins plugin for Jenkins open source. A security vulnerability exists in Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and prior versions, which stems from an unmasked QEngine API Key form field...
PT-2025-11702
Name of the Vulnerable Software and Affected Versions Jenkins Zoho QEngine Plugin versions 1.0.29.vfa cc23396502 and earlier Description The issue concerns the Jenkins Zoho QEngine Plugin, where the QEngine API Key form field is not masked, potentially allowing attackers to observe and capture it...
CVE-2025-30197: Missing Password Field Masking
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
API key displayed without masking by zohoqengine
zohoqengine stores the QEngine API Key in job config.xml files on the Jenkins controller as part of its configuration. While this key is stored encrypted on disk, in zohoqengine 1.0.29.vfacc23396502 and earlier the job configuration form does not mask the QEngine API Key form field, increasing th...
Kemana Directory 1.5.6 - kemana_admin_passwd Cookie User Password Hash Disclosure
No description provided by source. ? Kemana Directory 1.5.6 kemanaadminpasswd Cookie User Password Hash Disclosure Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easi...
Kemana Directory 1.5.6 (run param) Local File Inclusion Vulnerability
No description provided by source. ? Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with...
Kemana Directory 1.5.6 Database Backup Disclosure Exploit
No description provided by source. ?php / Kemana Directory 1.5.6 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana...
qEngine CMS 6.0.0 - Multiple Vulnerabilities
No description provided by source. ?php / qEngine CMS 6.0.0 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 6.0.0 and 4.1.6 Summary: qEngine qE is a lightweight, fast, yet feature packed CMS script to help you building your site quickly...
Kemana Directory 1.5.6 Local File Inclusion Vulnerability
Kemana Directory version 1.5.6 suffers from a local file inclusion vulnerability. Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana...
qEngine CMS 6.0.0 Remote Code Execution
qEngine CMS 6.0.0 Remote Code Execution Vendor: C97net Product web page: http://www.c97.net Affected version: 6.0.0 and 4.1.6 Summary: qEngine qE is a lightweight, fast, yet feature packed CMS script to help you building your site quickly. Using template engine to separate the php codes from the...
qEngine CMS 6.0.0 (task.php) Local File Inclusion
qEngine CMS 6.0.0 task.php Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 6.0.0 and 4.1.6 Summary: qEngine qE is a lightweight, fast, yet feature packed CMS script to help you building your site quickly. Using template engine to separate...