Lucene search
+L

122 matches found

Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.45 views

PT-2026-40440

Name of the Vulnerable Software and Affected Versions cPanel & WHM affected versions not specified Description Improper sanitization of the status query parameter in the '/unprotected/nova error' endpoint allows an unauthenticated attacker to inject arbitrary HTTP headers into the response...

8.3CVSS5.9AI score0.00301EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/05/08 12:00 a.m.35 views

PT-2026-38674

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.136.0.9 cPanel versions prior to 11.136.1.10 WP Squared cPanel versions prior to 11.134.0.25 cPanel versions prior to 11.132.0.31 cPanel versions prior to 11.130.0.22 cPanel versions prior to 11.126.0.58 cPanel...

8.8CVSS6.1AI score0.01855EPSS
SaveExploits0References36
BDU FSTEC
BDU FSTEC
added 2026/05/04 12:00 a.m.8 views

The vulnerability in cPanel, WebHost Manager, and WordPress Squared hosting panel lies in the lack of authentication for a critical function, allowing attackers to bypass existing security mechanisms and execute arbitrary code.

The vulnerability in web hosting via cPanel, WebHost Manager, and WordPress Squared hosting panel is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and execute arbitrary code...

10CVSS6.4AI score0.98527EPSS
SaveExploits74References6Affected Software3
GithubExploit
GithubExploit
added 2026/05/03 8:15 p.m.142 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940-POC cPanel/WHM Authentication Bypass Proof of...

9.8CVSS6AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/02 10:00 a.m.120 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 - cPanel & WHM Authentication Bypass Proof of C...

9.8CVSS5.9AI score0.98527EPSS
SaveExploits74
CISA KEV Catalog
CISA KEV Catalog
added 2026/04/30 12:00 a.m.27 views

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

WebPros cPanel & WHM WebHost Manager and WP2 WordPress Squared contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel...

9.8CVSS5.5AI score0.98527EPSS
SaveIn wildExploits74
Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.16 views

PT-2026-35936

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 86.0.41 cPanel versions prior to 110.0.97 cPanel versions prior to 118.0.63 cPanel versions prior to 124.0.35 cPanel versions prior to 126.0.54 cPanel versions prior to 130.0.19 cPanel versions prior to 132.0.29 cPanel...

9.8CVSS7.4AI score0.98527EPSS
SaveExploits74
RedhatCVE
RedhatCVE
added 2026/01/09 10:32 a.m.11 views

CVE-2017-18456

cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...

6.1CVSS6.3AI score0.00647EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2007-0886

Malware in sbrugna...

4.3CVSS6.4AI score0.01765EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2006-6181

Malware in sbrugna...

6CVSS6.4AI score0.01775EPSS
SaveExploits8References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-2615

Malware in sbrugna...

7.5CVSS6.4AI score0.01413EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2006-2616

Malware in sbrugna...

5CVSS6.4AI score0.01654EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2007-4097

Malware in sbrugna...

3.5CVSS6.4AI score0.00924EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2006-6531

Malware in sbrugna...

3.5CVSS6.4AI score0.00885EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2008-2896

Malware in sbrugna...

6.8CVSS6.4AI score0.00914EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2007-2267

Malware in sbrugna...

7.5CVSS6.4AI score0.05953EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2011-0530

Malware in sbrugna...

7.5CVSS6.4AI score0.0204EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2012-6301

Malware in sbrugna...

6.1CVSS6.3AI score0.01534EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2006-2617

Malware in sbrugna...

4.3CVSS6.4AI score0.0118EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 4:17 p.m.7 views

CVE-2020-25950

Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...

4.3CVSS7.1AI score0.00427EPSS
SaveExploits1
Rows per page
Query Builder