The vulnerability of the API Team Manager web hosting cPanel control interface allows a hacker to upload arbitrary files and increase their privileges.

The API Team Manager web hosting control panel has a vulnerability due to incorrect path name restrictions for the restricted directory. Exploiting this vulnerability allows an attacker to write arbitrary files and elevate their privileges to the root level...

CVE-2025-66429

An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...

CVE-2025-66429

An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...

CVE-2025-66429

An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...

CVE-2025-66429

cPanel versions 110 through 132 are vulnerable to a directory traversal vulnerability within the Team Manager API . This flaw stems from incorrect path name restrictions, allowing an attacker to overwrite arbitrary files. Successful exploitation can lead to privilege escalation to the root user l...

CVE-2025-66429

An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...

Cpanel 安全漏洞

Cpanel is a set of automated web-based colocation platforms from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions 110 through 132, which stems from the existence of directory...

PT-2025-50728

Name of the Vulnerable Software and Affected Versions cPanel versions 110 through 132 Description A directory traversal issue exists within the Team Manager API. This allows for the overwriting of arbitrary files, potentially leading to privilege escalation to the root user. Recommendations Updat...

CVE-2025-66429: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...

EUVD-2025-202876

An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user...

EUVD-2025-8324

Malicious code in bioql PyPI...

EUVD-2024-37555

Malicious code in bioql PyPI...

EUVD-2022-33744

Malicious code in bioql PyPI...

EUVD-2025-30618

Malicious code in bioql PyPI...

EUVD-2025-26937

Malicious code in bioql PyPI...

CVE-2025-58222

Missing Authorization vulnerability in Maidul Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through = 2.5.1...

CVE-2025-58222

Missing Authorization vulnerability in Dynamic Web Lab Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through 2.6.8...

WordPress Team Manager plugin <= 2.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Team Manager versions = 2.5.1...

CVE-2025-58222 WordPress Team Manager plugin <= 2.6.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dynamic Web Lab Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through 2.6.8...

CVE-2025-58222 WordPress Team Manager plugin <= 2.6.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dynamic Web Lab Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through 2.6.8...