425 matches found
Security Advisory Ivanti DSM (CVE-2026-3483)
Security Advisory Ivanti DSM CVE-2026-3483 Summary Ivanti has released an update for Ivanti Desktop and Server Management DSM which addresses one high severity vulnerability. Successful exploitation could allow an attacker to elevate their local privileges. We are not aware of any customers being...
CVE-2026-27975
Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code on this server. This is fixed in the version 2.2.13...
Ivanti Desktop and Server Management (DSM) < 2024.3.5740 Arbitrary File Deletion (CVE-2024-7572)
The version of Ivanti Desktop and Server Management DSM installed on the remote host is prior to 2024.3.5740. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-7572 advisory. - Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated...
CVE-2020-36978 Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...
CVE-2020-36978: Improper Neutralization of Input During Web Page Generation
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...
PT-2026-3072
Name of the Vulnerable Software and Affected Versions Roxy-WI versions prior to 8.2.8.2 Description Roxy-WI, a web interface for managing Haproxy, Nginx, Apache and Keepalived servers, contains a command injection issue in the log viewing functionality. Authenticated users can execute arbitrary...
The vulnerability of the cockpit-project.org website’s Cockpit server management system allows a attacker to perform an SSRF attack.
The vulnerability of the cockpit-project.org website related to the Cockpit server management system involves insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...
CVE-2023-29004
hap-wi/roxy-wi is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A Path Traversal vulnerability was found in the current version of Roxy-WI 6.3.9.0 at the moment of writing this report. The vulnerability can be exploited via an HTTP request to /app/options.py and the...
CVE-2024-34067
Pterodactyl is a free, open-source game server management panel built with PHP, React, and Go. Importing a malicious egg or gaining access to wings instance could lead to cross site scripting XSS on the panel, which could be used to gain an administrator account on the panel. Specifically, the...
The vulnerability of the Cockpit-HQ package of the Cockpit server management system allows a hacker to load arbitrary files.
The vulnerability of the Cockpit-HQ package of the Cockpit server management system involves unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to load any desired files...
Microsoft Windows Admin Center 安全漏洞
Microsoft Windows Admin Center is a locally deployed browser-based application from Microsoft USA. The program is primarily used to manage servers, clusters, and more. A security vulnerability exists in Microsoft Windows Admin Center that stems from improper access control and could lead to local...
CVE-2025-66508
1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies TrustedProxies = 0.0.0.0/0, allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls...
Exploit for CVE-2025-49132
CVE-2025-49132 CVE-2025-49132 is a critical arbitrary code exe...
The vulnerability of the Cockpit server management system, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Cockpit server management system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...
EUVD-2018-0005
Malware in sbrugna...
EUVD-2020-28014
Malware in sbrugna...
EUVD-2020-28013
Malware in sbrugna...
EUVD-1999-0436
Malware in sbrugna...