CVE-2020-10787

An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password aka the user password change script...

CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0519-1 Rating: important References: 1167465 1168421 1168911 Cross-References: CVE-2020-6423 CVE-2020-6430 CVE-2020-6431 CVE-2020-6432 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437...

CVE-2020-10231

creationtimestamp| type| source ---|---|--- 2020-04-01 19:28:26+00:00| seen| https://t.me/cibsecurity/10906 2024-10-18 17:00:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/888...

CVE-2020-10245

creationtimestamp| type| source ---|---|--- 2020-03-26 21:29:08+00:00| seen| https://t.me/cibsecurity/10770 2020-03-27 19:36:03+00:00| published-proof-of-concept| https://t.me/ctinow/21844 2020-03-30 09:47:35+00:00| seen| https://t.me/cibsecurity/10812 2026-03-17 12:00:00+00:00| seen|...

CVE-2019-15795

creationtimestamp| type| source ---|---|--- 2020-03-26 16:22:31+00:00| seen| https://t.me/cibsecurity/10758...

CVE-2019-15796

creationtimestamp| type| source ---|---|--- 2020-03-26 15:52:29+00:00| seen| https://t.me/cibsecurity/10752...

CVE-2020-5232

creationtimestamp| type| source ---|---|--- 2020-03-26 15:07:14+00:00| seen| https://t.me/techpwnews/272 2026-05-06 16:04:17+00:00| seen| https://t.me/codebysec/10094...

Threat Source newsletter (March 26, 2020)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. Just because we’re all still working from home doesn’t mean you can stop patching. We’ve been busy this week with a new wave of...

Linux/x86 - (reboot) polymorphic Shellcode (26 bytes)

Exploit Title: Linux\x86 - 'reboot' polymorphic Shellcode 26 bytes Purpose: This is a x86 Linux null-free polymorphic shellcode for forcing a reboot. Author: Upayan a.k.a. slaeryan Contact: email protected SLAE: 1525 Vendor Homepage: None Software Link: None Tested on: Linux x86 CVE: N/A / ;...

Vesta Control Panel Operating System Command Injection Vulnerability

Vesta Control Panel VestaCP is an open source web hosting control panel. An operating system command injection vulnerability exists in Vesta Control Panel VestaCP versions 0.9.8-26 and earlier, which can be exploited by an attacker to inject commands and execute code with the help of specially...

PT-2020-12337 · Vestacp · Vesta Control Panel

Name of the Vulnerable Software and Affected Versions: Vesta Control Panel VestaCP versions 0.9.8-26 and earlier Description: The issue allows Command Injection via the "schedule/backup Backup Listing Endpoint". An attacker must be able to create a crafted filename on the server. This can be...

CVE-2020-0684

creationtimestamp| type| source ---|---|--- 2020-03-11 05:05:26+00:00| seen| https://t.me/antichat/8049...

CVE-2019-15666

creationtimestamp| type| source ---|---|--- 2020-02-28 10:09:32+00:00| published-proof-of-concept| https://t.me/antichat/7986 2020-02-28 11:16:50+00:00| published-proof-of-concept| https://t.me/hybgl/43 2020-04-02 07:13:30+00:00| published-proof-of-concept| https://t.me/R0Crew/1447 2023-03-23...

CVE-2019-16024

creationtimestamp| type| source ---|---|--- 2020-01-26 12:37:59+00:00| seen| https://t.me/cveNotify/414...

CVE-2019-16018

creationtimestamp| type| source ---|---|--- 2020-01-26 12:37:55+00:00| seen| https://t.me/cveNotify/411...

CVE-2019-16005

creationtimestamp| type| source ---|---|--- 2020-01-26 12:37:52+00:00| seen| https://t.me/cveNotify/408...

CVE-2019-12619

creationtimestamp| type| source ---|---|--- 2020-01-26 12:37:44+00:00| seen| https://t.me/cveNotify/402...

Photon OS 3.0: Ruby PHSA-2020-3.0-0047

An update of the ruby package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0047. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133068;...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm speaking at SecIT by Heise in Hannover, Germany on March 26, 2020. The list is maintained on this page...