169 matches found
libprocesshider
libprocesshider Hide a process under Linux using the ld preloader. Full tutorial available at https://sysdigcloud.com/hiding-linux-processes-for-fun-and-profit/ In short, compile the library: gianluca@sid:/libprocesshider$ make gcc -Wall -fPIC -shared -o libprocesshider.so processhider.c -ldl...
PT-2025-42425
Name of the Vulnerable Software and Affected Versions Classified Pro versions up to and including 1.0.14 Description The Classified Pro theme for WordPress is susceptible to unauthorized plugin installation due to a missing capability check within the cwp addons update plugin cb function. This...
EUVD-2022-29790
Malicious code in bioql PyPI...
EUVD-2022-6088
Malicious code in bioql PyPI...
EUVD-2022-29791
Malicious code in bioql PyPI...
CVE-2025-48703: Improper Neutralization of Special Elements used in an OS Command
CWP aka Control Web Panel or CentOS Web Panel before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the ttotal parameter in a filemanager changePerm request. A valid non-root username must be known...
Malicious code in @digital-wealth-web/cwp-service-setu (npm)
The package @digital-wealth-web/cwp-service-setu was found to contain malicious code...
Malicious code in @digital-wealth-web/cwp-service-setup (npm)
The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...
MAL-2025-7747 Malicious code in @digital-wealth-web/cwp-service-setup (npm)
The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...
Exploit for CVE-2025-48703
💥 CVE-2025-48703 AutoExploit GUI/CLI 💥...
CVE-2022-25046
A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request...
CVE-2022-25048
Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user...
PT-2025-7378
Name of the Vulnerable Software and Affected Versions The Cosmic Blocks 40+ Content Editor Blocks Collection plugin for WordPress versions up to, and including, 1.3.0 Description The issue is related to Stored Cross-Site Scripting via the plugin's cwp social share shortcode due to insufficient...
GHSA-FRM9-7PM9-5RGC SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
The silverstripe/comments module, the cwp/starter-theme and the cwp/watea-theme include an outdated version of jQuery by default, which contains XSS vulnerabilities if user input is used in certain contexts. Though no known exploit has been found for these in the existing usage, user customisatio...
SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
The silverstripe/comments module, the cwp/starter-theme and the cwp/watea-theme include an outdated version of jQuery by default, which contains XSS vulnerabilities if user input is used in certain contexts. Though no known exploit has been found for these in the existing usage, user customisatio...
CVE-2023-42121
CVE-2023-42121 concerns Control Web Panel (CWP) missing authentication in its web interface, enabling remote code execution with no privileges required. The flaw results from a lack of authentication before accessing functionality, allowing an attacker to execute code in the context of a valid CW...
BIT-SILVERSTRIPE-2020-9280
In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x. This module is...
Exploit for OS Command Injection in Control-Webpanel Webpanel
Docs Paper : https://docs.google.com/document/d/1rQ7e9i2AFzHbASf...
CWP Control Web Panel OS Command Injection Vulnerability
CWP Control Web Panel formerly CentOS Web Panel contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter...
CVE-2022-44877
login/index.php in CWP aka Control Web Panel or CentOS Web Panel 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter...