EUVD-2020-18734

Malware in sbrugna...

EUVD-2020-18730

Malware in sbrugna...

CVE-2020-26098

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

cPanel Access Control Error Vulnerability (CNVD-2020-55176)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 88.0.3, which can be exploited by attackers to bypass the SMTP gray...

Unspecified vulnerability in cPanel (CNVD-2021-28344)

cPanel is a set of Web-based host control management system of the U.S. cPanel. A security vulnerability exists in versions of cPanel prior to 88.0.3. No detailed vulnerability details are provided at this time...

cPanel Jailshell Escape Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A Jailshell escape vulnerability exists in chsh in cPanel versions prior to 88.0.3. No detailed vulnerability details are provided at this time...

CVE-2020-26101

In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM SEC-549...

CVE-2020-26098

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

Design/Logic Flaw

In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM SEC-554...

Design/Logic Flaw

cPanel before 88.0.3 has weak permissions world readable for the proxy subdomains log file SEC-558...

CVE-2020-26100

CVE-2020-26100 affects cPanel prior to 88.0.3, where the chsh component enables a Jailshell escape (SEC-497). The description across sources confirms the issue and version boundary, but detailed exploit steps or exploitability are not provided in the supplied documents. A patch is indicated by up...

CVE-2020-26105

In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554). The vulnerability affects cPanel releases prior to 88.0.3 involving chkservd credential handling on templated VMs. Root cause is insecure test credentials being used in the chkservd process; explicit...