72 matches found
CVE-2026-111680 APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter
APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applications by supplying their own team id in the team query parameter. Attackers can target service or app ids exposed by /api/v1/simple/services...
CVE-2026-111680 APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter
APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applications by supplying their own team id in the team query parameter. Attackers can target service or app ids exposed by /api/v1/simple/services...
API Team Manager cPanel Upload Privilege Escalation
The API Team Manager web hosting control panel has a vulnerability due to incorrect path name restrictions for the restricted directory. Exploiting this vulnerability allows an attacker to write arbitrary files and elevate their privileges to the root level...
CVE-2025-66429
An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...
CVE-2025-66429
An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...
EUVD-2025-202876
An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...
CVE-2025-66429: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...
Cpanel security vulnerabilities
Cpanel is a set of automated web-based colocation platforms from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions 110 through 132, which stems from the existence of directory...
CVE-2025-66429
An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...
CVE-2025-66429
An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...
CVE-2025-66429
cPanel versions 110 through 132 are vulnerable to a directory traversal vulnerability within the Team Manager API . This flaw stems from incorrect path name restrictions, allowing an attacker to overwrite arbitrary files. Successful exploitation can lead to privilege escalation to the root user l...
PT-2025-50728
Name of the Vulnerable Software and Affected Versions cPanel versions 110 through 132 Description A directory traversal issue exists within the Team Manager API. This allows for the overwriting of arbitrary files, potentially leading to privilege escalation to the root user. Recommendations Updat...
EUVD-2022-33744
Malicious code in bioql PyPI...
EUVD-2024-37555
Malicious code in bioql PyPI...
EUVD-2025-30618
Malicious code in bioql PyPI...
EUVD-2025-26937
Malicious code in bioql PyPI...
EUVD-2025-8324
Malicious code in bioql PyPI...
CVE-2025-58222
Missing Authorization vulnerability in Maidul Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through = 2.5.1...
CVE-2025-58222
Missing Authorization vulnerability in Dynamic Web Lab Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through 2.6.8...
