cpanel2shell-scanner

cpanel2shell-scanner A high-fidelity scanner for the cPanel/WHM authentication bypass tracked as CVE-2026-41940. It identifies vulnerable hosts without producing the false-negatives common to public proofs-of-concept and detections, and without triggering the account lockout and root-IP-allowlist...

CVE-2026-29205

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints...

CVE-2026-29205

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints...

CVE-2026-29205

The CVE-2026-29205 issue affects cPanel & WHM. The vulnerability arises from incorrect privileges management and insufficient path filtering, enabling an attacker to read arbitrary files on the server via the cpdavd attachment download endpoints. PT Security reports indicate multiple vulnerabilit...

CVE-2026-29205

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints...

CVE-2026-29205

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints...

CVE-2026-29205: Execution with Unnecessary Privileges

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints...

EUVD-2017-9516

Malware in sbrugna...

CVE-2017-18400

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

cPanel Authorization Issues Vulnerability (CNVD-2019-36124)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in cPanel. An attacker can exploit this vulnerability to create the cpdavderrorlog fi...

cPanel Command Injection Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 68.0.15. An attacker can exploit the vulnerability to execute code wi...

CVE-2017-18425

In cPanel before 66.0.2, the cpdavderrorlog file can be created with weak permissions SEC-280...

CVE-2017-18400

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

CVE-2017-18400

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

Remote code execution

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

CVE-2017-18400

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

CVE-2017-18400

CVE-2017-18400 affects cPanel before 68.0.15, enabling local root code execution via the cpdavd component. The vulnerability is triggered by an attacker with local access, leading to complete control over the host’s root privileges as described in multiple sources (e.g., Red Hat advisory and CNVD...

CVE-2017-18400: Improper Neutralization of Special Elements used in a Command

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

PT-2019-8360

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue arises from the cpdavd error log file being created with weak permissions. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the issue...