CVE-2018-20927

CVE-2018-20927 (cPanel) affects cPanel prior to 70.0.23, where jailshell escape is possible due to incorrect crontab parsing (SEC-382). Exploitation is described as local (attack vector LOCAL) with LOW severity in CVSSv3 (3.8) and LOW in CVSSv2 (2.1). The root cause is mis-parsing of crontab entr...

CVE-2018-20902

cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation SEC-408...

CVE-2018-20902

cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation SEC-408...

Design/Logic Flaw

cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation SEC-408...

CVE-2018-20902

CVE-2018-20902 affects cPanel before 71.9980.37. The vulnerability lets an attacker read the root user’s crontab by leveraging the ClamAV installation (SEC-408). This is a local access issue tied to the ClamAV integration within cPanel. The available documents do not specify a patch version or re...

CVE-2018-20902

cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation SEC-408...

CVE-2018-20942: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon configuring crontab SEC-351...

PT-2019-10378

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows attackers to read the root's crontab file during a short time interval upon a post-update task. Recommendations: For versions prior to 68.0.27, update to version 68.0.27 or later ...

PT-2019-10375

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows attackers to read the root's crontab file during a short time interval when backups are enabled. Recommendations: For versions prior to 68.0.27, update to version 68.0.27 or later...

CVE-2018-20940: Concurrent Execution using Shared Resource with Improper Synchronization

cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of backups SEC-342...

PT-2019-10360

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue arises from incorrect crontab parsing, allowing jailshell escape. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...

PT-2019-10377

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows attackers to read the root's crontab file during a short time interval upon configuring crontab. Recommendations: For versions prior to 68.0.27, update to version 68.0.27 or later...

CVE-2018-20902: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation SEC-408...

PT-2019-10333

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows attackers to read the root's crontab file by leveraging ClamAV installation. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve...

CVE-2018-20927: Improper Authorization

cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing SEC-382...

CVE-2018-20943: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon a post-update task SEC-352...

RedGhost v3.0 - Linux Post Exploitation Framework Written In Bash Designed To Assist Red Teams In Persistence, Reconnaissance, Privilege Escalation And Leaving No Trace

Linux post exploitation framework designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace. Payloads Function to generate various encoded reverse shells in netcat, bash, python, php, ruby, perl SudoInject Function to inject sudo command with wrapper...

EvilGnome: A New Backdoor Implant Spies On Linux Desktop Users

Security researchers have discovered a rare piece of Linux spyware that's currently fully undetected across all major antivirus security software products, and includes rarely seen functionalities with regards to most Linux malware, The Hacker News learned. It's a known fact that there are a very...

RedGhost v2.0 - Linux Post Exploitation Framework Designed To Assist Red Teams In Gaining Persistence, Reconnaissance And Leaving No Trace

Linux post exploitation framework designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace. Payloads Function to generate various encoded reverse shells in netcat, bash, python, php, ruby, perl SudoInject Function to inject sudo command with wrapper...

CentOS Control Web Panel 0.9.8.836 - Privilege Escalation

//====================================================================\ || || || CWP Control Web Panel 0.9.8.836 - 0.9.8.839 || || Root Privilege Escalation || || || \====================================================================//...