Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Vesta/Hestia Control Panel Password Reset Host Header information disclosure


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in Vesta/Hestia Control Panel (unknown version) and classified as critical. This issue affects an unknown function of the component Password Reset. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Vesta/Hestia Control Panel Password Reset Host Header information disclosure


📈 110.26 Punkte
🕵️ Sicherheitslücken

🕵️ Vesta CP up to 0.9.8-17 Password Reset web/reset/index.php information disclosure


📈 55.27 Punkte
🕵️ Sicherheitslücken

📰 How to Set Up Hestia Control Panel on Ubuntu and Debian


📈 45.69 Punkte
🐧 Unix Server

💾 Hestia Control Panel 1.3.2 Arbitrary File Write


📈 45.69 Punkte
💾 IT Security Tools

⚠️ [webapps] Hestia Control Panel 1.3.2 - Arbitrary File Write


📈 45.69 Punkte
⚠️ PoC

🕵️ Hestia Control Panel up to 1.3.3 Domain Name Remote Privilege Escalation


📈 45.69 Punkte
🕵️ Sicherheitslücken

🕵️ Vanilla Forums up to 2.3.0 Password Reset class.email.php from HTTP Host Header information disclosure


📈 43.23 Punkte
🕵️ Sicherheitslücken

🕵️ Vanilla Forums bis 2.3.0 Password Reset class.email.php from HTTP Host Header Information Disclosure


📈 43.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-10787 | Vesta Control Panel up to 0.9.8-26 v-change-user-password privileges management


📈 41.85 Punkte
🕵️ Sicherheitslücken

🕵️ Vesta Control Panel 0.9.8-23 URL cross site scripting


📈 35.85 Punkte
🕵️ Sicherheitslücken

⚠️ Vesta Control Panel 0.9.8-16 Local Privilege Escalation


📈 35.85 Punkte
⚠️ PoC

⚠️ [local] - Vesta Control Panel 0.9.8-16 - Local Privilege Escalation


📈 35.85 Punkte
⚠️ PoC

⚠️ #0daytoday #Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution Exploit [#0day #Exploit]


📈 35.85 Punkte
⚠️ PoC

🕵️ Vuln: Vesta Control Panel 'bin/v-get-web-domain-value' Script Local Command Injection Vulnerability


📈 35.85 Punkte
🕵️ Sicherheitslücken

💾 Vesta Control Panel Authenticated Remote Code Execution


📈 35.85 Punkte
💾 IT Security Tools

⚠️ [webapps] - Vesta Control Panel <= 0.9.8-15 - Persistent XSS Vulnerability


📈 35.85 Punkte
⚠️ PoC

⚠️ #0daytoday #Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution Exploit [#0day #Exploit]


📈 35.85 Punkte
⚠️ PoC

⚠️ Vesta Control Panel 0.9.8-15 Cross Site Scripting


📈 35.85 Punkte
⚠️ PoC

💾 Vesta Control Panel Authenticated Remote Code Execution


📈 35.85 Punkte
💾 IT Security Tools

🕵️ Vesta Control Panel up to 0.9.8-22 edit/web/ domain cross site scripting


📈 35.85 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution (Metasploit)


📈 35.85 Punkte
⚠️ PoC

🕵️ Vesta Control Panel 0.9.8-20 view/file/index.php file_put_contents $_REQUEST['path'] cross site scripting


📈 35.85 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-10808 | Vesta Control Panel up to 0.9.8-26 Backup Listing Endpoint schedule/backup Shell Metacharacter os command injection (ID 157111)


📈 35.85 Punkte
🕵️ Sicherheitslücken

🕵️ Vesta Control Panel up to 0.9.8 list/backup/index.php backup command injection


📈 35.85 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-10786 | Vesta Control Panel up to 0.9.8-26 Cron Job input validation


📈 35.85 Punkte
🕵️ Sicherheitslücken

📰 Vesta control panel servers infected with DDoS malware after supply chain attack


📈 35.85 Punkte
📰 IT Security Nachrichten

🕵️ CVE-2019-9859 | Vesta Control Panel up to 0.9.8-23 escapeshellarg os command injection


📈 35.85 Punkte
🕵️ Sicherheitslücken

🕵️ Vesta Control Panel bis 0.9.8 list/backup/index.php backup erweiterte Rechte


📈 35.85 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3967 | Vesta Control Panel sed func/main.sh argument injection


📈 35.85 Punkte
🕵️ Sicherheitslücken

⚠️ Vesta Control Panel 0.9.8-16 Local Privilege Escalation


📈 35.85 Punkte
⚠️ PoC

🕵️ CVE-2021-46850 | myVesta/Vesta Control Panel HTTP POST Request /edit/server v_sftp_license command injection (EDB-49674)


📈 35.85 Punkte
🕵️ Sicherheitslücken

⚠️ [local] - Vesta Control Panel 0.9.8-16 - Local Privilege Escalation


📈 35.85 Punkte
⚠️ PoC

🕵️ Vesta Control Panel/myVesta UploadHandler.php unrestricted upload


📈 35.85 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Vesta Control Panel 'bin/v-get-web-domain-value' Script Local Command Injection Vulnerability


📈 35.85 Punkte
🕵️ Sicherheitslücken

🕵️ Vesta Control Panel 0.9.8-24 v-list-user directory traversal


📈 35.85 Punkte
🕵️ Sicherheitslücken

matomo
•