Prey 1.9.6 Unquoted Service Path

Exploit Title: Prey 1.9.6 - "CronService" Unquoted Service Path Discovery by: Ömer Tuygun Discovery Date:16.10.2020 Vendor Homepage: https://preyproject.com/ Software Link: https://preyproject.com/download/ Tested Version: 1.9.6 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 10 P...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-55179)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 90.0.10, which stems from allowing SELF XSS via the Cron...

cPanel cross-site scripting vulnerability (CNVD-2020-55180)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 90.0.10, which stems from allowing SELF XSS via the Cron...

ismartgate PRO File Upload Vulnerability

iSmartGate is a smart garage door opener system. A security vulnerability exists in ismartgate PRO version 1.5.9, which can be exploited by attackers to conduct privilege escalation attacks by appending PHP code to /cron/mailAdmin.php...

ismartgate PRO /cron/mailAdmin.php Elevation of Privilege Vulnerability

iSmartGate is a smart garage door opener system. A security vulnerability exists in ismartgate PRO /cron/mailAdmin.php that allows remote attackers to exploit the vulnerability to submit special requests that can elevate privileges...

CVE-2020-26115

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

CVE-2020-26114

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

CVE-2020-26114

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

Design/Logic Flaw

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

Design/Logic Flaw

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

CVE-2020-26114

CVE-2020-26114 (cPanel before 90.0.10) is documented as a self XSS vulnerability in the Cron Jobs interface (SEC-573). The vulnerability affects cPanel’s web-based admin UI, enabling self-derived XSS via cron job input handling. Multiple connected sources consistently describe the same issue; no ...

CVE-2020-26114

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

CVE-2020-26115

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

CVE-2020-26115

CVE-2020-26115 affects cPanel prior to 90.0.10. The issue is a self XSS via the Cron Editor interface (SEC-574). Affected product: cPanel web-based platform; vulnerability originates from improper handling in the Cron Editor, enabling a user-supplied payload to execute in the context of the admin...

CVE-2020-12842

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

CVE-2020-12842

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

CVE-2020-12839

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php...

CVE-2020-12838

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php...

CVE-2020-12839

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php...

Privilege escalation

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...