94 matches found
FallingSkies-CVE-2023-35885
CVE-2023-35885 Cloudpanel 제로데이 익스플로잇 작성자: @EagleTube, @Mzulfahmy, @farphalabs Github : https://github.com/datackmy/FallingSkies-CVE-2023-35885/blob/main/ 영향받는 버전: v2.0.0 – v2.3.0 패치된 버전: v2.3.1 공급업체 홈페이지: CloudPanel.io 제품: CloudPanel 참조: https://www.datack.my/fallingskies-cloudpanel-0-day/ , 상세 분...
Cloudpanel 2 < 2.3.1 - Remote Code Execution
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. id: CVE-2023-35885 info: name: Cloudpanel 2 2.3.1 - Remote Code Execution author: DhiyaneshDk severity: critical description: | CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. impact: | Successfu...
cloudpanel-2.4.2-CVE-2024-44765-recovery
CVE-2024-44765 は、MGT-COMMERCE GmbH CloudPanel バージョン 2.0.0 から 2.4.2 における不適切な認可（アクセス制御の設定ミス）の脆弱性です。 1. 各フォルダの指示に従ってください（これはローカルで行う必要があります） 2. パスワードとアクセス権をリセットする for root $ sudo passwd root while for users $ getent passwd | grep -vE "nologin|false" | cut -d: -f1 $ sudo passwd 3. 不正なアクセスを削除する $ geten...
CloudPanel-CVE-2023-33747
CloudPanel-CVE-2023-33747...
CVE-2026-24525
Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through = 1.0.2...
CVE-2026-24525
Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through = 1.0.2...
CVE-2026-24525
CVE-2026-24525 concerns CloudPanel CLP Varnish Cache (WordPress plugin) <= 1.0.2 with Missing Authorization due to incorrectly configured access control. Affected versions are listed as
CVE-2026-24525
Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through = 1.0.2...
CVE-2026-24525: Missing Authorization
Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through = 1.0.2...
PT-2026-4375
Name of the Vulnerable Software and Affected Versions CloudPanel CLP Varnish Cache versions through 1.0.2 Description An authorization issue exists in CloudPanel CLP Varnish Cache. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access...
CVE-2025-15241
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CVE-2025-15241
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CVE-2025-15241
CloudPanel Community Edition up to 2.5.1 is affected by an open redirect vulnerability in the HTTP Header Handler’s handling of the Referer argument in the /admin/users file. The issue enables remote attackers to trigger a redirect by manipulating Referer, with exploitation disclosed publicly. Re...
CVE-2025-15241 CloudPanel Community Edition HTTP Header users redirect
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
CloudPanel 输入验证错误漏洞
CloudPanel is a free software from CloudPanel Open Source. It is used to configure and manage servers. An input validation error vulnerability exists in CloudPanel 2.5.1 and earlier versions, which stems from incorrect manipulation of the file /admin/users parameter Referer in the component HTTP...
CVE-2025-15241: URL Redirection to Untrusted Site
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack...
PT-2025-53858
Name of the Vulnerable Software and Affected Versions CloudPanel Community Edition versions up to 2.5.1 Description A security issue exists in CloudPanel Community Edition. The problem involves an open redirect through manipulation of the Referer argument within an unknown function of the...
