27 matches found
AI-Code-Vulnerability-Scanner
AI-Code-Vulnerability-Scanner The AI Code Vulnerability Scanne...
EUVD-2021-25028
Malware in sbrugna...
EUVD-2019-5600
Malware in sbrugna...
EUVD-2019-5605
Malware in sbrugna...
oath-toolkit: Local root exploit in a PAM module
A vulnerability was found in a PAM module, the oath-toolkit. The module gained a feature that allowed placing the OTP state file, called the usersfile, in the home directory of the to-be-authenticated user. The PAM module performed unsafe file operations in the users' home directories. Since PAM...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2019-14394
cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetchsslcertificatesforfqdns API SEC-489...
CVE-2019-14399
The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...
oath-toolkit: Local root exploit in a PAM module
A vulnerability was found in a PAM module, the oath-toolkit. The module gained a feature that allowed placing the OTP state file, called the usersfile, in the home directory of the to-be-authenticated user. The PAM module performed unsafe file operations in the users' home directories. Since PAM...
oath-toolkit: Local root exploit in a PAM module
A vulnerability was found in a PAM module, the oath-toolkit. The module gained a feature that allowed placing the OTP state file, called the usersfile, in the home directory of the to-be-authenticated user. The PAM module performed unsafe file operations in the users' home directories. Since PAM...
oath-toolkit: Local root exploit in a PAM module
A vulnerability was found in a PAM module, the oath-toolkit. The module gained a feature that allowed placing the OTP state file, called the usersfile, in the home directory of the to-be-authenticated user. The PAM module performed unsafe file operations in the users' home directories. Since PAM...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
PT-2021-22228
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 98.0.1 Description The issue concerns unsafe operations on files performed by the /scripts/cpan config script. Recommendations For versions prior to 98.0.1, update to version 98.0.1 or later to resolve the issue...
CVE-2017-18388
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...
Code injection
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...
PT-2019-8323
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows cPanel to perform unsafe file operations due to Jailshell not setting the umask. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the iss...
