CVE-2020-26115

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

CVE-2020-26114

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

Design/Logic Flaw

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

Design/Logic Flaw

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

CVE-2020-26114

CVE-2020-26114 (cPanel before 90.0.10) is documented as a self XSS vulnerability in the Cron Jobs interface (SEC-573). The vulnerability affects cPanel’s web-based admin UI, enabling self-derived XSS via cron job input handling. Multiple connected sources consistently describe the same issue; no ...

CVE-2020-26114

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

CVE-2020-26115

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

CVE-2020-26115

CVE-2020-26115 affects cPanel prior to 90.0.10. The issue is a self XSS via the Cron Editor interface (SEC-574). Affected product: cPanel web-based platform; vulnerability originates from improper handling in the Cron Editor, enabling a user-supplied payload to execute in the context of the admin...

CVE-2020-12842

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

CVE-2020-12842

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

CVE-2020-12839

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php...

CVE-2020-12838

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php...

CVE-2020-12839

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php...

Privilege escalation

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

Privilege escalation

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php...

CVE-2020-12842

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

CVE-2020-12839

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php...

The vulnerability of the `force_rescan_user` function in the Cron daemon, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability of the forcerescanuser function in the Cron daemon is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2020-15431

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxcrons.php. When parsing the user parameter, the process does not...

Undetectable Linux Malware Targeting Docker Servers With Exposed APIs

Cybersecurity researchers today uncovered a completely undetectable Linux malware that exploits undocumented techniques to stay under the radar and targets publicly accessible Docker servers hosted with popular cloud platforms, including AWS, Azure, and Alibaba Cloud. Docker is a popular...