CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

CVE-2020-26109 affects cPanel prior to version 88.0.13, where a protection mechanism intended to restrict package modification can be bypassed (SEC-557). The public documents consistently describe a bypass vulnerability enabling modification of packages despite the protection. Affected product: c...

CVE-2020-26110

cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces SEC-564...

CVE-2020-26111

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26111

CVE-2020-26111 affects cPanel prior to 90.0.10. The vulnerability is a self XSS in the WHM Edit DNS Zone interface (SEC-566). Impact described as partial integrity risk with low confidentiality/low integrity and no availability impact in CVSS 3.1 (base score 6.1; UI required; network vector; chan...

CVE-2020-26115: Improper Neutralization of Input During Web Page Generation

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

CVE-2020-26101: Improper Authentication

In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM SEC-549...

CVE-2020-26098: Undefined Security Weakness

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

CVE-2020-26102: Undefined Security Weakness

In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM SEC-550...

CVE-2020-26106: Incorrect Permission Assignment for Critical Resource

cPanel before 88.0.3 has weak permissions world readable for the proxy subdomains log file SEC-558...

CVE-2020-26107: Use of Insufficiently Random Values

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys SEC-561...

CVE-2020-26108: Undefined Security Weakness

cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution SEC-488...

CVE-2020-26113: Improper Neutralization of Input During Web Page Generation

cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces SEC-569...

CVE-2020-26111: Improper Neutralization of Input During Web Page Generation

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26109: Undefined Security Weakness

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-3611

u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, Kamorta, MSM8998, QCS404, QCS605, SDA66...

CVE-2020-3611

u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, Kamorta, MSM8998, QCS404, QCS605, SDA66...

CVE-2020-3611

CVE-2020-3611 affects Qualcomm/Qualcomm-based Snapdragon platforms (e.g., APQ8098, Kamorta, MSM8998, QCS404/605, SDA660/845, SDM6xx/7xx, SXR1130, etc.). The root cause is an improper access issue caused by XBL SEC clearing only the ZI region when loading Qualcomm-signed segments, which can lead t...

PT-2020-17564

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue arises when the XBL SEC clears only the ZI region while loading Qualcomm-signed segments, potentially leading to an improper access issue. This affects various...

Malicious Package in sj-tw-sec

All versions of sj-tw-sec contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...