CVE-2017-18448

cPanel before 64.0.21 allows certain file-read operations via a Serverinfomanpage API call SEC-252...

EUVD-2016-1836

Malware in sbrugna...

EUVD-2017-9564

Malware in sbrugna...

EUVD-2017-6749

Malware in sbrugna...

EUVD-2017-9590

Malware in sbrugna...

EUVD-2019-5610

Malware in sbrugna...

EUVD-2018-13427

Malware in sbrugna...

CVE-2016-10842

cPanel before 11.54.0.4 allows certain file-read operations in bin/setupglobalspamfilter.pl SEC-74...

CVE-2016-10815

cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs SEC-120...

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

CVE-2017-18474

CVE-2017-18474 affects cPanel before 62.0.4. The issue allows arbitrary file-read operations via Exim valiases, due to an improper handling path/resource filtering. Public descriptions consistently show impact as reading restricted files. Connected documents confirm the product/version and the un...

CVE-2017-18405

CVE-2017-18405 affects cPanel before 68.0.15. The issue arises from the backup .htaccess modification logic (SEC-345) and enables arbitrary file-read operations. The vulnerability is locally exploitable with no user interaction required, and could lead to exposure of restricted files (confidentia...

CVE-2016-10815

cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs SEC-120...

CVE-2016-10836

CVE-2016-10836 affects cPanel prior to version 55.9999.141. The vulnerability allows arbitrary file-read operations during authentication with CalDAV. The issue is confirmed in multiple sources (NVD entry and Red Hat/CVE pages). Affected software: cPanel before 55.9999.141. Root cause: improper f...

CVE-2018-20908

cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling SEC-435...

CVE-2018-20891

CVE-2018-20891 affects cPanel prior to 74.0.0, where File Restoration can perform arbitrary file-read operations. The vulnerability is triggered during File Restoration and is reported with a local attack vector and low complexity, with confidentiality impact listed as HIGH in CVSS. Some sources ...

Design/Logic Flaw

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

Design/Logic Flaw

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...