Lucene search
K

14 matches found

Circl
Circl
added 2025/12/05 9:24 a.m.2 views

CVE-2025-13360

creationtimestamp| type| source ---|---|--- 2025-12-05 09:24:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7a64alhdh2w...

4.3CVSS5.8AI score0.00124EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:6 a.m.4 views

CVE-2019-13360

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username...

9.8CVSS7.2AI score0.2445EPSS
Exploits5References1
CVE
CVE
added 2025/01/22 7:29 a.m.53 views

CVE-2024-13360

CVE-2024-13360 affects the WordPress plugin AI Power: Complete AI Pack (≤ 1.8.96). It is vulnerable to Server-Side Request Forgery via the wpaicg_troubleshoot_add_vector() function, allowing authenticated users with subscriber-level or higher privileges to make web requests from the WordPress ins...

5.4CVSS5.3AI score0.00223EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/01/22 7:29 a.m.30 views

CVE-2024-13360 AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicgtroubleshootaddvector. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to...

5.4CVSS0.00223EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/11/18 11:41 p.m.6 views

CVE-2020-13360

...

Exploits0
CVE
CVE
added 2020/11/18 11:41 p.m.45 views

CVE-2020-13360

CVE-2020-13360 is rejected; this candidate does not represent an active vulnerability entry.

6.8AI score
Exploits0
0day.today
0day.today
added 2019/07/17 12:0 a.m.55 views

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass Vulnerability

Exploit for linux platform in category web applications Exploit Title: CWP CentOS Control Web Panel ||/us...

7.5CVSS9.4AI score0.2445EPSS
Exploits6
NVD
NVD
added 2019/07/16 5:15 p.m.19 views

CVE-2019-13360

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username...

9.8CVSS8.8AI score0.2445EPSS
Exploits5References2
Prion
Prion
added 2019/07/16 5:15 p.m.20 views

Authentication flaw

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from...

6.5CVSS9.3AI score0.2445EPSS
Exploits6References3Affected Software1
CVE
CVE
added 2019/07/16 5:0 p.m.169 views

CVE-2019-13360

CVE-2019-13360 affects CentOS Web Panel (CWP) 0.9.8.836. Remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username. The Red Hat advisory confirms a similar authentication bypass for affected CWP versions, indicating this class of issue is tied to ...

9.8CVSS9.2AI score0.2445EPSS
Exploits5References2Affected Software1
Packet Storm
Packet Storm
added 2019/07/16 12:0 a.m.142 views

CentOS Control Web Panel 0.9.8.836 Authentication Bypass

Exploit Title: CWP CentOS Control Web Panel ||//theme/original CVE-2019-13360 ================================...

0.9AI score0.2445EPSS
Exploits6
exploitpack
exploitpack
added 2019/07/16 12:0 a.m.32 views

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass Exploit Title: CWP CentOS Control Web Panel ||//...

7.5CVSS0.9AI score0.2445EPSS
Exploits6
Exploit DB
Exploit DB
added 2019/07/16 12:0 a.m.113 views

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass

Exploit Title: CWP CentOS Control Web Panel ||//theme/original CV...

9.8CVSS9.5AI score0.2445EPSS
Exploits6
CVE
CVE
added 2018/11/27 9:0 p.m.42 views

CVE-2018-13360

TerraMaster TOS 3.1.03 Text Editor is vulnerable to cross-site scripting via the filename URL parameter, enabling an attacker to inject and execute JavaScript. This is documented in CVE-2018-13360 and corroborated by CNVD/NVD entries and related OpenVAS data, all indicating the issue centers on t...

6.1CVSS6.8AI score0.01324EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder