31 matches found
EUVD-2025-6782
Malicious code in bioql PyPI...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
CVE-2025-30197
CVE-2025-30197 concerns Jenkins Zoho QEngine Plugin prior to 1.0.29.vfa_cc23396502, where the QEngine API Key form field is not masked. This omission can allow attackers to observe or capture the API key in the UI input path. The CVE is documented across multiple sources (NVD entry and Red Hat ad...
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
Jenkins Zoho QEngine Plugin 安全漏洞
Jenkins Zoho QEngine Plugin is a Jenkins plugin for Jenkins open source. A security vulnerability exists in Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and prior versions, which stems from an unmasked QEngine API Key form field...
qEngine CMS 6.0.0 - Multiple Vulnerabilities
No description provided by source. ?php / qEngine CMS 6.0.0 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 6.0.0 and 4.1.6 Summary: qEngine qE is a lightweight, fast, yet feature packed CMS script to help you building your site quickly...
Kemana Directory 1.5.6 Database Backup Disclosure Exploit
No description provided by source. ?php / Kemana Directory 1.5.6 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana...
Kemana Directory 1.5.6 - kemana_admin_passwd Cookie User Password Hash Disclosure
No description provided by source. ? Kemana Directory 1.5.6 kemanaadminpasswd Cookie User Password Hash Disclosure Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easi...
Kemana Directory 1.5.6 (run param) Local File Inclusion Vulnerability
No description provided by source. ? Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with...
Kemana Directory 1.5.6 Local File Inclusion Vulnerability
Kemana Directory version 1.5.6 suffers from a local file inclusion vulnerability. Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana...
qEngine 4.1.66.0.0 - task.php Local File Inclusion
qEngine 4.1.66.0.0 - task.php Local File Inclusion source: https://www.securityfocus.com/bid/66401/info qEngine is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input before being used to include files. An attacker can exploit this issue using...
qEngine CMS 6.0.0 - Multiple Vulnerabilities
$total return; ifempty$starttime $starttime=time; $now = time; $perc=double$done...
qEngine CMS 6.0.0 Database Backup Disclosure Vulnerability
qEngine CMS version 6.0.0 suffers from a database backup disclosure vulnerability. $total return;...
qEngine CMS 6.0.0 Remote Code Execution Vulnerability
qEngine CMS version 6.0.0 suffers from a remote code execution vulnerability. qEngine CMS 6.0.0 Remote Code Execution Vendor: C97net Product web page: http://www.c97.net Affected version: 6.0.0 and 4.1.6 Summary: qEngine qE is a lightweight, fast, yet feature packed CMS script to help you buildin...
qEngine CMS 6.0.0 - Multiple Vulnerabilities
qEngine CMS 6.0.0 - Multiple Vulnerabilities $total return; ifempty$starttime $starttime=time; $now = time; $perc=double$done/$total; $b...
Kemana Directory 1.5.6 - kemana_admin_passwd Cookie User Password Hash Disclosure
Kemana Directory 1.5.6 kemanaadminpasswd Cookie User Password Hash Disclosure Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's...
qEngine CMS 6.0.0 Remote Code Execution
Summary qEngine qE is a lightweight, fast, yet feature packed CMS script to help you building your site quickly. Using template engine to separate the php codes from the design, you don't need to touch the codes to design your web site. qE is also expandable by using modules. Description qEngine...