Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in CloudPanel Community Edition 2.5.4-3+clp-bookworm, the closed-source server-management panel from cloudpanel.io (Germany) that provisions and supervises nginx, php-fpm, MariaDB and hosted web sites from a Symfony application... Weiterlesen: [0day-rubbish] CloudPanel 2.5.4-3 site-settings rootDirectory nginx v…
Intelligence View
⚡ tsecurity.de Intelligence
[0day-rubbish] CloudPanel 2.5.4-3 site-settings rootDirectory nginx virtual-host injection to host root code execution (8.8)
Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in CloudPanel Community Edition…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
27 Quellen
CVE-2022-48192 | Softing smartLink SW-HT up to 1.29 cross site scripting (EUVD-2022-50903)
26 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2022-48193 | Softing smartLink SW-HT up to 1.29 inadequate encryption (EUVD-2022-50904) VVulDB Updatesvor 2 Std.CVE-2024-13362 | Spotlight Social Feeds Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Embedder for Google Reviews Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Mapster WP Maps Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Justified Gallery Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | AI Puffer Plugin on WordPress Parameter url cross site scripting
+20
19 Quellen
Linux Kernel TIPC DoS: named_distribute() NULL Dereference, Race Analysis, and Remote Triggering
18 weitere Quellen
IIT Security Newsvor 58 Min.Critical Linux Kernel Vulnerability Lets Remote Attackers Crash Ubuntu Systems CCyber Security Newsvor 2 Std.Critical Linux Kernel Vulnerability Allows Remote Attackers to Execute Code With Root Privileges VVulDB Updatesvor 3 Std.CVE-2025-39756 | Linux Kernel up to 6.16.1 mm/slub.c kvmalloc_array file descriptor consumption (EUVD-2025-28956 / Nessus ID 264737) VVulDB Updatesvor 3 Std.CVE-2025-39758 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 do_tcp_sendpages allocation of resources (Nessus ID 264695 / WID-SEC-2025-2040) VVulDB Updatesvor 3 Std.CVE-2025-39757 | Linux Kernel up to 6.17-rc1 ALSA allocation of resources (EUVD-2025-28955 / Nessus ID 264722) VVulDB Updatesvor 3 Std.CVE-2025-39759 | Linux Kernel up to 6.16.1 btrfs_ioctl_quota_rescan use after free (EUVD-2025-28953 / Nessus ID 264768)
+12
14 Quellen
Binance: Hacker erbeuten 6,3 Milliarden Dollar in Digitalwährungen
13 weitere Quellen
GGoogle Alertvor 2 Std.Hacker stiehlt Binance 6,3 Milliarden Dollar - tippinpoint GGoogle Alertvor 2 Std.Historischer Raub: Hacker erbeuten fast sechs Milliarden Dollar bei Binance - salzburg24 GGoogle Alertvor 1 Std.Binance gehackt: Kryptobörse verliert wohl über 2 Milliarden Dollar - 20 Minuten GGoogle Alertvor 1 Std.Analysefirma: Nordkoreanische Hacker hinter Angriff auf Binance - TradingView GGoogle Alertvor 1 Std.Cyberangriff auf Kryptobörse Binance: Hacker erbeuten 6,3 Milliarden in nur 20 Minuten GGoogle Alertvor 1 Std.Binance: Hacker erbeuten 6,3 Milliarden Dollar in Digitalwährungen - DER SPIEGEL
+7
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4272991/sicherheitsluecken-cve/0day-rubbish-cloudpanel-254-3-site-settings-rootdirectory-nginx-virtual-host-injection-to-host-root-code-execution-88/