471 matches found
CVE-2026-48172---LiteSpeed-cPanel-Plugin-Version-Auditor
CVE-2026-48172 - Auditor de Vulnerabilidad del Plugin LiteSpeed para cPanel Este repositorio contiene una herramienta local de cumplimiento de seguridad y auditoría diseñada para detectar instalaciones vulnerables del Plugin LiteSpeed User-End para cPanel afectado por CVE-2026-48172. El objetivo ...
CVE-2024-44000
CVE-2024-44000 LiteSpeed - Toma de Cuenta No Autorizada El PoC ya está publicado. ¡Fue creado solo con fines educativos/de investigación! ¡Úselo bajo su propio riesgo!...
CVE-2024-28000
PoC de Escalada de Privilegios en LiteSpeed Cache - CVE-2024-28000 🎤 Traducción del README Inglés فارسی 📸 Captura de pantalla 💎 Introducción Este repositorio contiene una Prueba de Concepto PoC para una vulnerabilidad crítica de escalada de privilegios descubierta en el plugin LiteSpeed Cache de...
CVE-2026-54420-LiteSpeed-Symlink-Exploit
CVE-2026-54420 - LiteSpeed cPanel Plugin Symlink Privilege Escalation ⚠️ ADVERTENCIA Este código es SOLO para fines educativos y pruebas de seguridad autorizadas. El uso no autorizado contra sistemas sin permiso explícito es ILEGAL. 📋 Descripción CVE-2026-54420 es una vulnerabilidad de escalada de...
LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache- from n/a through 5.7. id: CVE-2023-40000 info: name: LiteSpeed Cache = 5.7 - Unauthenticated Stored XSS...
WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from 1.9 through 6.3.0.1. id: CVE-2024-28000 info: name: WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin...
LiteSpeed Cache <= 6.5.0.2 - Stored XSS
LiteSpeed Technologies LiteSpeed Cache versions up to 6.5.0.2 contain a stored cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in victim browsers, exploit requires storing malicious input. id: CVE-2024-47374 info...
LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure
The LiteSpeed Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.1 through the debug.log file that is publicly exposed. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...
litespeed-cpanel-cve-2026-54420-fix
Kit de Mitigación CVE-2026-54420 Kit de remediación defensiva, auditoría y verificación para CVE-2026-54420 que afecta al Plugin LiteSpeed para cPanel en entornos de alojamiento compartido que utilizan CloudLinux / CageFS. ⚠️ Aviso de Seguridad Este repositorio está destinado únicamente a...
CVE-2024-28000
LiteSpeed Cache Privilege Escalation Exp CVE-2024-28000Scan.py Este script primero identificará la versión, determinará si es una versión vulnerable, luego intentará confirmar si existe el archivo de registro. Si existe, intentará enviar paquetes y luego solicitará nuevamente el archivo de regist...
CVE-2024-28000
PoC de Escalada de Privilegios en LiteSpeed Cache - CVE-2024-28000 Este repositorio contiene un script de Prueba de Concepto PoC para explotar una vulnerabilidad de escalada de privilegios en el plugin LiteSpeed Cache de WordPress. La vulnerabilidad, identificada como CVE-2024-28000 , permite a...
CVE-2024-28000
CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...
CVE-2024-44000-LiteSpeed-Cache
PoC Exploit de LiteSpeed Cache CVE-2024-44000 CVE-2024-44000 es una vulnerabilidad en el plugin LiteSpeed Cache, un popular plugin de WordPress. Esta vulnerabilidad afecta la gestión de sesiones en LiteSpeed Cache, permitiendo a los atacantes obtener acceso no autorizado a datos sensibles. El...
MAL-2026-11193 Malicious code in litespeed-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3af61c30e0a85b26bb59e521eb02a26c0b7071446d99d03cdf6b07f790b1f8 This npm package a name resemblance to the WordPress LiteSpeed Cache plugin, which is not an npm module ships a preinstall script and a top-level...
Malicious code in litespeed-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3af61c30e0a85b26bb59e521eb02a26c0b7071446d99d03cdf6b07f790b1f8 This npm package a name resemblance to the WordPress LiteSpeed Cache plugin, which is not an npm module ships a preinstall script and a top-level...
Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin
CVE-2026-54420 Mitigation Toolkit !Licensehttps://img.shie...
Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin
cve-id ⚡ Simple Usage Use this project only in safe and...
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by June 18, 2026. The vulnerability in questi...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-20262link is external Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability CVE-2026-54420link is external LiteSpeed cPanel Plugin UNIX...
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
LiteSpeed cPanel plugin contains a UNIX symbolic link Symlink following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS...