Recent vulnerabilities and exploits

cPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574)....

cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558)....

chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497)....

The email quota cache in cPanel before 90.0.10 allows overwriting of files....

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557)....

In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554)....

cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488)....

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573)....

Pagure before 5.6 allows XSS via the templates/blame.html blame view....

In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550)....

« PREV 1 2 3 4 5 6 7 NEXT »