1311 matches found
Control Web Panel /admin/index.php Unauthenticated RCE
Control Web Panel CWP versions use exploit/linux/http/control/webpanelapicmdexec msf undefinedwebpanelapicmdexec show actions ...actions... msf undefinedwebpanelapicmdexec set ACTION msf undefinedwebpanelapicmdexec show options ...show and set options... msf undefinedwebpanelapicmdexec run This...
CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added two security flaws impacting Gladinet and Control Web Panel CWP to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerabilities in question are listed below ...
Linanto Control Web Panel (CWP) < 0.9.8.1205 Command Injection (CVE-2025-48703)
The version of Linanto Control Web Panel CWP, a web based control panel application, installed on the remote host is prior to 0.9.8.1205. It is, therefore, affected by a remote code execution via shell metacharacters in the ttotal parameter in a filemanager changePerm request. Note that Nessus ha...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-11371link is external Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability CVE-2025-48703link is external CWP...
CWP Control Web Panel OS Command Injection Vulnerability
CWP Control Web Panel formerly CentOS Web Panel contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the ttotal parameter in a filemanager changePerm request. A valid non-root username must be known...
PT-2025-45417
Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description A denial-of-service issue exists due to insufficient input validation. Visiting a website may cause an application to become unresponsive. Recommendations Update to macOS version 26.1...
CVE-2025-62797 CSRF in FluxCP account endpoints allows account takeover / state-changing actions
FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery CSRF vulnerability exists in the FluxCP-based website template used by multiple rAthena/Ragnarok servers. State-changing POST endpoints accept browser-initiated requests that are authoriz...
EUVD-2020-7598
Malware in sbrugna...
EUVD-2020-7419
Malware in sbrugna...
EUVD-2019-6247
Malware in sbrugna...
EUVD-2019-5485
Malware in sbrugna...
EUVD-2019-4880
Malware in sbrugna...
EUVD-2019-5869
Malware in sbrugna...
EUVD-2019-5871
Malware in sbrugna...
EUVD-2018-10488
Malware in sbrugna...
EUVD-2020-7605
Malware in sbrugna...
EUVD-2020-7422
Malware in sbrugna...
EUVD-2019-5873
Malware in sbrugna...