99 matches found
FallingSkies-CVE-2023-35885
CVE-2023-35885 Cloudpanel 0-day Exploit Author: @EagleTube, @Mzulfahmy, @farphalabs Github : https://github.com/datackmy/FallingSkies-CVE-2023-35885/blob/main/ Affected version: v2.0.0 – v2.3.0 Patched version: v2.3.1 Vendor homepage: CloudPanel.io Product: CloudPanel References:...
CloudPanel-CVE-2023-33747
CloudPanel-CVE-2023-33747...
cloudpanel-2.4.2-CVE-2024-44765-recovery
CVE-2024-44765 is an Improper Authorization Access Control Misconfiguration vulnerability in MGT-COMMERCE GmbH CloudPanel versions 2.0.0 to 2.4.2 1. Follow instructions in every folder this should be done locally 2. Reset Passwords and Access for root $ sudo passwd root while for users $ getent...
Cloudpanel 2 < 2.3.1 - Remote Code Execution
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. id: CVE-2023-35885 info: name: Cloudpanel 2 2.3.1 - Remote Code Execution author: DhiyaneshDk severity: critical description: | CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. impact: | Successfu...
CloudPanel rootDirectory nginx vhost injection RCE
Authenticated panel: poison site rootDirectory with injected nginx locations, anonymous PUT PHP under /tmp, FastCGI exec as root confirm via handler. """CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Settings Root Directory Field CWE-93""" from future import annotatio...
CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Sett — Detect
Fingerprint / reachability check for CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Settings Root Directory Field CWE-93 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Settings Roo...
CloudPanel 2.5.4-3+clp-bookworm Nginx Virtual Host Configuration Injection
CloudPanel Community Edition version 2.5.4-3+clp-bookworm contains an nginx virtual-host configuration injection in the site-settings rootDirectory field. A proof of concept demonstrates authenticated injection of nginx directives leading to root command execution...
CloudPanel Login - Detect
Detects CloudPanel Login - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CloudPanel Login - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CloudPanel Login - Detect', 'description': 'Detects...
CVE-2026-24525
Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through = 1.0.2...
CVE-2026-24525
Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through = 1.0.2...
CVE-2026-24525
Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through = 1.0.2...
CVE-2026-24525
CVE-2026-24525 concerns CloudPanel CLP Varnish Cache (WordPress plugin) <= 1.0.2 with Missing Authorization due to incorrectly configured access control. Affected versions are listed as
CVE-2026-24525: Missing Authorization
Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through = 1.0.2...
PT-2026-4375
Name of the Vulnerable Software and Affected Versions CloudPanel CLP Varnish Cache versions through 1.0.2 Description An authorization issue exists in CloudPanel CLP Varnish Cache. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access...
CVE-2025-15241
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CVE-2025-15241
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CVE-2025-15241
CloudPanel Community Edition up to 2.5.1 is affected by an open redirect vulnerability in the HTTP Header Handler’s handling of the Referer argument in the /admin/users file. The issue enables remote attackers to trigger a redirect by manipulating Referer, with exploitation disclosed publicly. Re...