9 matches found
CVE-2026-107854 Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)
Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...
CVE-2026-107854
The Jexactyl game management and billing system (versions 4.0.0 to 4.0.5 ) contains an authorization bypass vulnerability in the POST /api/client/billing/free/process endpoint. The application fails to verify ownership when processing a client-controlled server_id , allowing an authenticated user...
EUVD-2026-95983
Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...
CVE-2026-107854 Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)
Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...
CVE-2017-18431
cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts CPANEL-13941...
CVE-2017-18431
cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts CPANEL-13941...
CVE-2017-18431
CVE-2017-18431 affects cPanel prior to 66.0.1 and relates to unreliable suspend/unsuspend operations on accounts (CPANEL-13941). Multiple sources (NVD entry and Red Hat advisory) document the issue with a CVSS v3 base score of 7.5 (HIGH) and an integrity impact described as HIGH, while attack vec...
PT-2019-8366
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.1 Description The issue concerns the unreliable performance of suspend and unsuspend operations on accounts. Recommendations For versions prior to 66.0.1, update to version 66.0.1 or later to resolve the issue...
