148 matches found
CVE-2022-44877-white-box
Docs Paper : https://docs.google.com/document/d/1rQ7e9i2AFzHbASfRu3nkgjIswbrS2AB2i7V9OK3dJLs/edit?usp=sharing Libprochider : https://github.com/gianlucaborello/libprocesshider /var/www/html YouTube Demo : https://www.youtube.com/watch?v=V0HgzE8IElA&t=343s テスト済みマシン CentOS 7 - CentOS Web Panel...
EUVD-2022-29791
Malicious code in bioql PyPI...
EUVD-2022-29790
Malicious code in bioql PyPI...
EUVD-2022-6088
Malicious code in bioql PyPI...
CVE-2025-48703: Improper Neutralization of Special Elements used in an OS Command
CWP aka Control Web Panel or CentOS Web Panel before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the ttotal parameter in a filemanager changePerm request. A valid non-root username must be known...
Malicious code in @digital-wealth-web/cwp-service-setup (npm)
The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...
Malicious code in @digital-wealth-web/cwp-service-setu (npm)
The package @digital-wealth-web/cwp-service-setu was found to contain malicious code...
MAL-2025-7747 Malicious code in @digital-wealth-web/cwp-service-setup (npm)
The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...
Exploit for CVE-2025-48703
💥 CVE-2025-48703 AutoExploit GUI/CLI 💥...
CVE-2022-25046
A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request...
CVE-2022-25048
Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user...
SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
The silverstripe/comments module, the cwp/starter-theme and the cwp/watea-theme include an outdated version of jQuery by default, which contains XSS vulnerabilities if user input is used in certain contexts. Though no known exploit has been found for these in the existing usage, user customisatio...
GHSA-FRM9-7PM9-5RGC SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
The silverstripe/comments module, the cwp/starter-theme and the cwp/watea-theme include an outdated version of jQuery by default, which contains XSS vulnerabilities if user input is used in certain contexts. Though no known exploit has been found for these in the existing usage, user customisatio...
CVE-2023-42121
CVE-2023-42121 concerns Control Web Panel (CWP) missing authentication in its web interface, enabling remote code execution with no privileges required. The flaw results from a lack of authentication before accessing functionality, allowing an attacker to execute code in the context of a valid CW...
BIT-SILVERSTRIPE-2020-9280
In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x. This module is...
Exploit for OS Command Injection in Control-Webpanel Webpanel
Docs Paper : https://docs.google.com/document/d/1rQ7e9i2AFzHbASf...
CWP Control Web Panel OS Command Injection Vulnerability
CWP Control Web Panel formerly CentOS Web Panel contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter...
CVE-2022-44877
login/index.php in CWP aka Control Web Panel or CentOS Web Panel 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter...
Design/Logic Flaw
login/index.php in CWP aka Control Web Panel or CentOS Web Panel 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter...
