Lucene search
+L

141 matches found

Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•60 views

PT-2026-40440

Name of the Vulnerable Software and Affected Versions cPanel & WHM affected versions not specified Description Improper sanitization of the status query parameter in the '/unprotected/nova error' endpoint allows an unauthenticated attacker to inject arbitrary HTTP headers into the response...

8.3CVSS5.9AI score0.00369EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/05/08 12:00 a.m.•48 views

PT-2026-38674

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.136.0.9 cPanel versions prior to 11.136.1.10 WP Squared cPanel versions prior to 11.134.0.25 cPanel versions prior to 11.132.0.31 cPanel versions prior to 11.130.0.22 cPanel versions prior to 11.126.0.58 cPanel...

8.8CVSS6.1AI score0.00692EPSS
SaveExploits0References36
BDU FSTEC
BDU FSTEC
•added 2026/05/04 12:00 a.m.•10 views

The vulnerability in cPanel, WebHost Manager, and WordPress Squared hosting panel lies in the lack of authentication for a critical function, allowing attackers to bypass existing security mechanisms and execute arbitrary code.

The vulnerability in web hosting via cPanel, WebHost Manager, and WordPress Squared hosting panel is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and execute arbitrary code...

10CVSS7.7AI score0.98527EPSS
SaveExploits79References6Affected Software3
GithubExploit
GithubExploit
•added 2026/05/03 8:15 p.m.•153 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940-POC cPanel/WHM Authentication Bypass Proof of...

9.8CVSS9AI score0.98527EPSS
SaveExploits79
GithubExploit
GithubExploit
•added 2026/05/02 10:00 a.m.•127 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 - cPanel & WHM Authentication Bypass Proof of C...

9.8CVSS8.6AI score0.98527EPSS
SaveExploits79
CISA KEV Catalog
CISA KEV Catalog
•added 2026/04/30 12:00 a.m.•40 views

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

WebPros cPanel & WHM WebHost Manager and WP2 WordPress Squared contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel...

9.8CVSS8.8AI score0.98527EPSS
SaveIn wildExploits79
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•22 views

PT-2026-35936

Name of the Vulnerable Software and Affected Versions cPanel and WHM versions prior to 11.110.0.97 cPanel and WHM versions prior to 11.118.0.63 cPanel and WHM versions prior to 11.126.0.54 cPanel and WHM versions prior to 11.132.0.29 cPanel and WHM versions prior to 11.134.0.20 cPanel and WHM...

9.8CVSS8.6AI score0.98527EPSS
SaveExploits79
RedhatCVE
RedhatCVE
•added 2026/01/09 10:32 a.m.•17 views

CVE-2017-18456

cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...

6.1CVSS6.3AI score0.00647EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2006-2616

Malware in sbrugna...

5CVSS6.4AI score0.01654EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2007-0886

Malware in sbrugna...

4.3CVSS6.4AI score0.01821EPSS
SaveExploits2References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2007-4097

Malware in sbrugna...

3.5CVSS6.4AI score0.00924EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2006-6531

Malware in sbrugna...

3.5CVSS6.4AI score0.00919EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2006-2617

Malware in sbrugna...

4.3CVSS6.4AI score0.0118EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2007-2267

Malware in sbrugna...

7.5CVSS6.4AI score0.05953EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2011-0530

Malware in sbrugna...

7.5CVSS5.8AI score0.0204EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2012-6301

Malware in sbrugna...

6.1CVSS6.3AI score0.01534EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2006-6181

Malware in sbrugna...

6CVSS6.4AI score0.01775EPSS
SaveExploits8References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2006-2615

Malware in sbrugna...

7.5CVSS6.4AI score0.01413EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2008-2896

Malware in sbrugna...

6.8CVSS6.4AI score0.00914EPSS
SaveExploits2References5
RedhatCVE
RedhatCVE
•added 2025/05/22 4:17 p.m.•16 views

CVE-2020-25950

Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...

4.3CVSS7.1AI score0.00432EPSS
SaveExploits1
Rows per page
Query Builder