178 matches found
CVE-2026-27602: Improper Neutralization of Special Elements used in an OS Command
Modoboa is a mail hosting and management platform. Prior to version 2.7.1, execcmd in modoboa/lib/sysutils.py always runs subprocess calls with shell=True. Since domain names flow directly into shell command strings without any sanitization, a Reseller or SuperAdmin can include shell metacharacte...
Malicious Package
Overview flexfone-reseller is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2016-10822
cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images SEC-88...
CVE-2017-18482
cPanel before 62.0.4 allows resellers to use the WHM enqueuetransferitem API for queueing non-rearrange modules SEC-213...
CVE-2017-18455
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
EUVD-2021-13082
Malware in sbrugna...
EUVD-2017-9571
Malware in sbrugna...
EUVD-2019-5597
Malware in sbrugna...
EUVD-2016-1816
Malware in sbrugna...
EUVD-2007-1297
Malware in sbrugna...
EUVD-2010-1896
Malware in sbrugna...
EUVD-2017-15569
Malware in sbrugna...
EUVD-2024-52443
Malicious code in bioql PyPI...
EUVD-2024-15985
Malicious code in bioql PyPI...
EUVD-2022-26597
Malicious code in bioql PyPI...
CVE-2024-0186
A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...
CVE-2022-21373
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Reseller Locator. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner...
CVE-2021-26266
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...