CVE-2025-25873

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...

CVE-2025-25871

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

CVE-2025-25871

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

CVE-2025-25872

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

CVE-2025-25873

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...

CVE-2025-25872

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

CVE-2025-25871

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

Open Panel OpenAdmin 安全漏洞

Open Panel OpenAdmin is a free Laravel-based open administration panel from Open Panel, Inc. A security vulnerability exists in Open Panel OpenAdmin version 0.3.4, which stems from cross-site request forgery and could lead to elevation of privilege...

CVE-2025-25871

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

CVE-2025-25872

Open Panel vulnerable component: Fix Permissions function in version 0.3.4 allows remote privilege escalation / possible RCE. Exploitation is demonstrated by public writeups showing a POST to /fix-permissions that can execute arbitrary commands. Affected software is Open Panel v0.3.4; remediation...

CVE-2025-25871

Open Panel v0.3.4 contains an elevation of privilege flaw exploitable through the Fix Permissions function, allowing remote privilege escalation. The vulnerability affects the Fix Permissions/ Fix Privileges flow and is documented across multiple feeds (NVD, Red Hat, CNVD, CNNVD, etc.). Remediati...

CVE-2025-25872

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

CVE-2025-25871

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

CVE-2025-25873

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...

CVE-2025-25872

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

Cyber Panel 2.3.x Remote Command Execution

Cyber Panel version 2.3.x proof of concept remote command execution exploit that leverages three vulnerabilities discovered in 2024. ============================================================================================================================================= | Title : Cyber Panel...

The vulnerability of the EcoStruxure Panel Server module lies in the exposure of password values in the log file, allowing attackers to disclose sensitive information.

The vulnerability of the EcoStruxure Panel Server module relates to the disclosure of password values in the log file. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the functions ili9881c_prepare() and ili9881c_unprepare() in the driver (drivers/gpu/drm/panel/panel-ilitek-ili9881c.c) of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the functions ili9881cprepare and ili9881cunprepare in the driver drivers/gpu/drm/panel/panel-ilitek-ili9881c.c of the Linux kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the MFlash secure data exchange platform lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the administration panel by injecting specially crafted HTML code...

Schneider Electric EcoStruxure Panel Server 日志信息泄露漏洞

The Schneider Electric EcoStruxure Panel Server is an IoT gateway for data collection and upload from Schneider Electric France. A log information disclosure vulnerability exists in Schneider Electric EcoStruxure Panel Server v2.0 and prior versions, which originates from inserting sensitive...