100 matches found
aapanel
aapanel aapanel 6.6.6 - CVE-2020-14950 الوصف : يسمح للمستخدمين المصادق عليهم عن بُعد بتنفيذ أوامر عشوائية عبر قائمة الإعدادات في متجر البرامج. الإصدار المتأثر : جميع الإصدارات = 6.6.6 معلومات لإعداد هذا الـ PoC، قمت فقط بتثبيت البرنامج باستخدام docker-compose نوع الثغرة : تنفيذ الأوامر عن بُعد RC...
aapanel-ws-bypass
aaPanel: i vendor non sempre correggono le cose correttamente Una correzione incompleta per CVE-2021-37840 espone ancora 3,6 milioni di server a RCE come root, 5 anni dopo Scoperto da: EON Security CVE: Assegnazione in sospeso CVSS: 8.8 Alto — AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Interessati:...
CVE-2026-29859
An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2026-29856
An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a crafted input...
CVE-2026-29858
A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...
EUVD-2026-12921
An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...
EUVD-2026-12864
A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...
CVE-2026-29858
A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...
CVE-2026-29856
An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a crafted input...
CVE-2026-29859
An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2026-29858
A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...
CVE-2026-29859
An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2026-26105
CVE-2026-29858 A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure. https://t.co/WowAOqIOTR...
CVE-2026-29856
An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a crafted input...
CVE-2026-29858
A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure...
aaPanel 安全漏洞
aaPanel is a simple yet powerful web-based control panel developed under the open-source license. Version 7.57.0 of aaPanel contains a security vulnerability caused by insufficient path validation, which may lead to local file inclusion attacks and result in the exposure of sensitive information...
PT-2026-26104
CVE-2026-29856 An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a … https://t.co/cUJ0hUck1A...
CVE-2026-29856
An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service ReDoS via a crafted input...