13 matches found
CVE-2026-50979
CVE-2026-50979: oPanel에서의 인증된 원격 코드 실행 개요 CVE ID: CVE-2026-50979 Product: oPanel 영향받는 버전: v1.19.50 및 이전 취약점 유형: 인증된 명령 인젝션 / 원격 코드 실행 RCE 취약한 구성 요소: /advanced/curl 엔드포인트 심각도: 치명적 설명 명령 인젝션 취약점이 oPanelv1.19.50 및 이전 버전의 advanced/curl 엔드포인트에 존재합니다. 애플리케이션은 url 매개변수에 제공된 사용자 입력을 시스템의 기본 curl 실행 루틴에...
CVE-2026-50980
CVE-2026-50980: Cross-Site Scripting XSS basado en DNS y secuestro de sesión en oPanel Resumen ID de CVE: CVE-2026-50980 Producto: oPanel Versiones afectadas: v1.20.25 Tipo de vulnerabilidad: Cross-Site Scripting XSS almacenado vía DNS / Secuestro de sesión Severidad: Alta...
CVE-2026-50980
Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...
CVE-2026-50979
A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...
CVE-2026-50979
A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...
EUVD-2026-67767
A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...
CVE-2026-50979
Osbil Technology oPanel (v1.19.50 and earlier) contains a command injection vulnerability in the advanced/curl endpoint. The url parameter is not adequately sanitized before being passed to the system's curl execution routine. An authenticated attacker can bypass space restrictions using shell va...
PT-2026-83134
A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...
CVE-2026-50980
Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...
EUVD-2026-67917
Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...
CVE-2026-50980
oPanel (a web hosting control panel) contains a Stored XSS in its DNS lookup/management component, affecting versions before v1.20.25 . The root cause is the lack of HTML encoding when DNS responses (specifically TXT records) are rendered in the panel's web interface. An attacker who controls a n...
