Rails sprockets Arbitrary file reading vulnerability CVE-2018-3760 Vulnerability Description Ruby On Rails uses Sprockets as a static file server in the development environment. Ruby On Rails is ...

Rails Accept Arbitrary file reading vulnerability CVE-2019-5418 Vulnerability Description Ruby on Rails is a web application framework, a relatively new web application framework built on the Rub...

Qizhi Fortress gui_detail_view.php Any user login vulnerability Vulnerability Description Qizhi Fortress has a login vulnerability for any user. You can get backend permissions by accessing a spe...

Qiniu Cloud logkit log_path Any file reading vulnerability Vulnerability Description Qiniu Cloud logkit log_path parameter can customize reading server files. Writing the read files into the web ...

Qimingxingchen 4A unified security control platform getMaster.do information leakage vulnerability Vulnerability Description Qiming Xingchen 4A unified security control platform getMaster.do inte...

Qibo CMS V7 job.php arbitrary file reading vulnerability Vulnerability Description The URL parameters of QiboCMS V7 version/do/job.php page are not filtered strictly, resulting in downloading any...

QEMU virtual machine escape vulnerability CVE-2020-14364 Vulnerability Description On August 24, local time, an out-of-bounds read and write vulnerability (CVE-2020-14364) that exists in the QEMU...

PowerJob list Information Leakage Vulnerability CVE-2023-29923 Vulnerability Description There is an information leakage vulnerability in the PowerJob list interface. Attackers can access the aut...

PigCMS action_flashUpload any file upload vulnerability Vulnerability Description There is a vulnerability to upload any file in the PigCMS action_flashUpload method. The attacker can upload any ...

Pd-CMS Shiro default key Remote command execution vulnerability Vulnerability Description Pd-CMS has a Shiro default key. The attacker’s use of known keys will cause a Shiro remote command execut...