CVE-2019-10068: Kentico CMS Vulnerability
An N-day vulnerability in Kentico CMS used by QTFY.
Tag: CMS
Sneeit Framework
A framework targeted in a global CMS exploitation campaign for web shell deployment.
Craft CMS
A content management system targeted in a global CMS exploitation campaign for web shell deployment.
MaxSite CMS
A content management system targeted in a global CMS exploitation campaign for web shell deployment.
MetInfo CMS
A content management system targeted in a global CMS exploitation campaign for web shell deployment.
iCagenda and Balbooa Forms Joomla Flaws Exploited as Zero-Days; CISA Adds to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…
CVE-2025-6389: Sneeit Framework Vulnerability
A vulnerability in the Sneeit Framework exploited in a global CMS campaign for web shell deployment.
CVE-2025-12352: Gravity Forms WordPress Plugin Vulnerability
A vulnerability in the Gravity Forms WordPress plugin exploited in a global CMS campaign for web shell deployment.
CVE-2025-32432: Craft CMS Vulnerability
A vulnerability in Craft CMS exploited in a global CMS campaign for web shell deployment.
CVE-2026-3395: MaxSite CMS Vulnerability
A vulnerability in MaxSite CMS exploited in a global CMS campaign for web shell deployment.