Lucene search
+L

13507 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.11 views

The vulnerability of the server management application CentOS Web Panel lies in the insufficient verification of the authenticity of executed requests, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the application for managing CentOS Web Panel servers admin/index.php?module=sendssh is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS7.9AI score0.0348EPSS
SaveExploits6References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.8 views

The vulnerability of the server management application CentOS Web Panel lies in the insufficient verification of the authenticity of executed requests, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the administration application for CentOS Web Panel admin/index.php?module=rootpwd is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS7.9AI score0.03409EPSS
SaveExploits6References3Affected Software1
zdt
zdt
added 2019/04/09 12:00 a.m.537 views

CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.c...

5.5AI score0.02826EPSS
SaveExploits5
exploitpack
exploitpack
added 2019/04/08 12:00 a.m.58 views

CentOS Web Panel 0.9.8.793 (Free) 0.9.8.753 (Pro) - Cross-Site Scripting

CentOS Web Panel 0.9.8.793 Free 0.9.8.753 Pro - Cross-Site Scripting Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 06 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com...

3.5CVSS5AI score0.02826EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2019/04/08 12:00 a.m.45 views

CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) Cross Site Scripting

Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 06 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: v0.9.8.793 Free an...

5.2AI score0.02826EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2019/04/08 12:00 a.m.65 views

CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) - Cross-Site Scripting

Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 06 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: v0.9.8.793 Free an...

4.8CVSS5.1AI score0.02826EPSS
SaveExploits5
OSV
OSV
added 2019/04/03 3:29 p.m.5 views

CVE-2019-10261

CentOS Web Panel CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action...

4.8CVSS5.8AI score0.02338EPSS
SaveExploits5References3
NVD
NVD
added 2019/04/03 3:29 p.m.28 views

CVE-2019-10261

CentOS Web Panel CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action...

4.8CVSS4.9AI score0.02338EPSS
SaveExploits5References3
Prion
Prion
added 2019/04/03 3:29 p.m.20 views

Cross site scripting

CentOS Web Panel CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action...

3.5CVSS4.8AI score0.02338EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist
added 2019/04/03 2:07 p.m.38 views

CVE-2019-10261

CentOS Web Panel CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action...

4.8AI score0.02338EPSS
SaveExploits5References3
CVE
CVE
added 2019/04/03 2:07 p.m.74 views

CVE-2019-10261

CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS in the DNS Functions → Edit Nameservers IPs form (Name Server 1/2). Root cause: insufficient input sanitization, enabling an attacker to store and render script payloads to other users. CVE-2019-10261 is described across multiple records with b...

4.8CVSS4.8AI score0.02338EPSS
SaveExploits5References3Affected Software1
OpenVAS
OpenVAS
added 2019/04/03 12:00 a.m.1402 views

CentOS Update for libssh2 CESA-2019:0679 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.5AI score0.09294EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2019/04/03 12:00 a.m.35 views

Fedora Update for python35 FEDORA-2019-cf725dd20b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.8AI score0.20743EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2019/04/03 12:00 a.m.55 views

Fedora Update for python34 FEDORA-2019-6baeb15da3

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.7AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2019/04/03 12:00 a.m.31 views

CentOS Update for firefox CESA-2019:0672 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.29514EPSS
SaveExploits15References2
OpenVAS
OpenVAS
added 2019/04/03 12:00 a.m.28 views

CentOS Update for thunderbird CESA-2019:0681 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.29514EPSS
SaveExploits26References2
OpenVAS
OpenVAS
added 2019/04/03 12:00 a.m.40 views

CentOS Update for thunderbird CESA-2019:0680 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.29514EPSS
SaveExploits26References2
CNVD
CNVD
added 2019/04/02 12:00 a.m.9 views

CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2019-14092)

CentOS Web Panel CWP is a free web hosting control panel. A cross-site scripting vulnerability exists in CentOS Web Panel version 0.9.8.78, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side cod...

4.8CVSS6.4AI score0.02338EPSS
SaveExploits5References1
Tenable Nessus
Tenable Nessus
added 2019/04/02 12:00 a.m.34 views

CentOS 7 : firefox (CESA-2019:0671)

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.8CVSS8.5AI score0.29514EPSS
SaveExploits15References3
Tenable Nessus
Tenable Nessus
added 2019/04/02 12:00 a.m.34 views

CentOS 6 : firefox (CESA-2019:0672)

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.8CVSS8.5AI score0.29514EPSS
SaveExploits15References3
Rows per page
Query Builder