CVE-2020-6872

The CVE-2020-6872 issue affects ZTE server-management software and is a storage XSS vulnerability. The attack path involves injecting malicious scripts via the foreground login page, causing the user’s browser to execute the payload. Affected firmware/models include multiple R5300G4V0x, R8500G4V0...

CVE-2020-6872

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects...

CVE-2020-6871

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects:...

CVE-2020-6871

CVE-2020-6871 concerns a ZTE server management software module with an authentication bypass that lets an attacker skip server authentication and execute commands with high-level privileges. The vulnerability affects multiple ZTE router/server models (e.g., R5300G4V03.x, R8500G4V03.x, R5500G4V03....

CVE-2020-6871: Improper Authentication

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects:...

PT-2020-19283

Name of the Vulnerable Software and Affected Versions ZTE server management software module versions V03.08.0100 through V03.05.0040 ZTE server management software module versions V03.07.0300 through V03.07.0100 ZTE server management software module versions V03.07.0103 through V03.05.0020 ZTE...

CVE-2020-6872: Improper Neutralization of Input During Web Page Generation

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects...

PT-2020-4342

Name of the Vulnerable Software and Affected Versions: ZTE server management software module versions V03.08.0100 through V03.07.0100 for R5300G4 ZTE server management software module versions V03.07.0103 through V03.05.0020 for R8500G4 ZTE server management software module versions V03.08.0100...

Hackers Exploit Critical Flaw in Ghost Platform with Cryptojacking Attack

Hackers targeted the publishing platform Ghost over the weekend, launching a cryptojacking attack against its servers that led to widespread outages. The attack stemmed from the exploit of critical vulnerabilities in SaltStack, used in Ghost’s server management infrastructure. Ghost is a free,...

Haozitong Video Conferencing Enterprise Edition Server Administration Background Exists Arbitrary File Download Vulnerability

Shenzhen Yinpeng Cloud Computing Co., Ltd. is a cloud computing product and service provider. Arbitrary file download vulnerability exists in the server management background of GoodView Video Conference Enterprise Edition, which can be exploited by attackers to obtain sensitive information...

PT-2020-12793

Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions through 13.1 Description An issue was discovered in the Admin Interface, allowing Cross-Site Request Forgery CSRF for various actions, including changing usernames and passwords including admin accounts,...

Pagoda Linux Panel of Dongguan Baita Network Technology Co., Ltd. suffers from logic flaw vulnerability

Pagoda Linux Panel is the server management software to improve the efficiency of operation and maintenance, supports one-click LAMP/LNMP/cluster/monitoring/website/FTP/database/JAVA and more than 100 server management functions. Pagoda Linux Panel of Dongguan Beta Network Technology Co., Ltd...

The vulnerability of the CentOS Web Panel application for managing servers arises from insufficient validation of input data. This allows a malicious individual to delete a subdomain from a user account.

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to delete a subdomain from a user’s account remotely...

The vulnerability of the server management application for CentOS Web Panel stems from authentication procedures that have flaws, allowing attackers to escalate their privileges.

The vulnerability of the CentOS Web Panel server management application is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

The vulnerability of the server management application for CentOS Web Panel lies in the lack of protection for operational data, allowing attackers to disclose sensitive information.

The vulnerability of the CentOS Web Panel administration application lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerability of the server management application for CentOS Web Panel stems from authentication procedures that have flaws, allowing attackers to escalate their privileges.

The vulnerability of the CentOS Web Panel server management application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the application configuration for managing servers using CentOS Web Panel allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the application configuration for CentOS Web Panel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by modifying the administrator’s email address...

Lenovo XClarity Controller CSV Injection Vulnerability

Lenovo XClarity Controller XCC is a server-embedded management engine from Lenovo, China, that is used to standardize and automate basic server management tasks. A CSV injection vulnerability exists in Lenovo XClarity Controller. An attacker can exploit this vulnerability to execute arbitrary cod...

cPanel Privilege Permission and Access Control Issues Vulnerability (CNVD-2019-36117)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A vulnerability exists in cPanel for privilege permission and access control issues. Detailed vulnerability details are not...

CVE-2019-14838

The CVE-2019-14838 entry concerns WildFly (wildfly-core) prior to 7.2.5.GA, where Management users bearing Monitor, Auditor, or Deployer roles could modify the server’s runtime state due to an authorization misconfiguration. The issue is tied to WildFly/JBoss components, with multiple advisories ...