Lucene search
+L

8 matches found

NVD
NVD
added 2026/07/28 11:17 a.m.9 views

CVE-2026-63302

Quick.CMS is vulnerable to Local File Inclusion LFI in the admin.php endpoint via the p parameter. An authenticated attacker with admin privileges can include arbitrary files located within the application's directory structure via a crafted HTTP request. Successful exploitation allows disclosure...

5.1CVSS0.00307EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/28 10:43 a.m.9 views

CVE-2026-63303

A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash ../ sequences before resolving and serving the requested file. An authenticated attacker with admin privileges can use this vulnerability to read...

7CVSS5.9AI score0.00391EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 12:40 p.m.14 views

CVE-2023-43784

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

7.5CVSS6.9AI score0.00473EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-23863

Malicious code in bioql PyPI...

8.8CVSS8.6AI score
SaveExploits0
Imperva Blog
Imperva Blog
added 2024/11/07 11:3 p.m.15 views

Imperva: A Leader in WAAP

Imperva – a Thales company and leading provider of Web Application and API Protection WAAP solutions, is a force to be reckoned with in the cybersecurity landscape. Our comprehensive approach to security, encompassing database security, enterprise application security, bot management, DDoS...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/02/22 11:3 a.m.36 views

3 Steps to Automate Your Third-Party Risk Management Program

If you Google "third-party data breaches" you will find many recent reports of data breaches that were either caused by an attack at a third party or sensitive information stored at a third-party location was exposed. Third-party data breaches don't discriminate by industry because almost every...

0.1AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2023/02/16 2:0 p.m.22 views

IDC MarketScape Names Akamai a Contender in Worldwide Public Cloud IaaS

Akamai’s inclusion as a Contender in the "IDC MarketScape: Worldwide Public Cloud Infrastructure as a Service Vendor Assessment" demonstrates the strength of our cloud computing services...

7AI score
SaveExploits0
Kitploit
Kitploit
added 2020/04/24 9:30 p.m.75 views

Should-I-Trust - OSINT Tool To Evaluate The Trustworthiness Of A Company

should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a review board that's...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder