Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
91 results · page 2 of 2
Apr 13, 2026MaxKB is an open-source AI assistant for enterprise.CVE-2026-39418 · Other software · 1Panel-dev · reported by GitHubMedium 5
MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox network protection can be bypassed by using socket.sendto() with the MSG_FASTOPEN flag. This allows authenticated user with tool-editing permissions to reach internal services that are explicitly blocked by the sandbox's banned hosts configuration. MaxKB's sandbox uses LD_PRELOAD to hook the connect() function and block connections to banned IPs, but Linux's sendto() with the MSG_FASTOPEN flag can establish TCP connections directly through the kernel without ever calling connect(), completely bypassing the IP validation. Although sendto is listed in the syscall() wrapper, this is ineffective because glibc invokes the kernel syscall directly rather than routing through the hooked syscall() function. This issue has been fixed in version 2.8.0.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 13, 2026MaxKB is an open-source AI assistant for enterprise.CVE-2026-39417 · Other software · 1Panel-dev · reported by GitHubMedium 4.6
MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete fix for CVE-2025-53928, where a Remote Code Execution vulnerability still exists in the MCP node of the workflow engine. MaxKB only restricts the referencing code path (loading MCP config from the database). The else branch, responsible for loading mcp_servers directly from user-supplied JSON remains completely unpatched. Since mcp_source is an optional field (required=False), an attacker can simply omit it or set it to any non-referencing value to bypass the fix. By calling the workflow creation API directly with a crafted JSON payload, an attacker can inject a complete MCP node configuration with stdio transport, arbitrary command, and args — achieving RCE when the workflow is triggered via chat. This issue has been fixed in version 2.8.0.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 13, 2026A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2.CVE-2025-15632 · Other software · 1Panel-dev · reported by VulDBLow 2
A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2. Impacted is an unknown function of the file ui/src/chat.ts of the component MdPreview. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.5.0 is recommended to address this issue. The name of the patch is 7230daa5ec3e6574b6ede83dd48a4fbc0e70b8d8. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2026A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1.CVE-2026-6108 · Other software · 1Panel-dev · reported by VulDBLow 2.1
A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1. The affected element is the function execute of the file apps/application/flow/step_node/mcp_node/impl/base_mcp_node.py of the component Model Context Protocol Node. Performing a manipulation results in os command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2026A flaw has been found in 1Panel-dev MaxKB up to 2.6.1.CVE-2026-6107 · Other software · 1Panel-dev · reported by VulDBMedium 5.1
A flaw has been found in 1Panel-dev MaxKB up to 2.6.1. This issue affects some unknown processing of the file apps/common/middleware/chat_headers_middleware.py of the component ChatHeadersMiddleware. This manipulation of the argument Name causes cross site scripting. Remote exploitation of the attack is possible. Upgrading to version 2.8.0 is capable of addressing this issue. Patch name: 026a2d623e2aa5efa67c4834651e79d5d7cab1da. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2026A vulnerability was detected in 1Panel-dev MaxKB up to 2.2.1.CVE-2026-6106 · Other software · 1Panel-dev · reported by VulDBLow 2
A vulnerability was detected in 1Panel-dev MaxKB up to 2.2.1. This vulnerability affects the function StaticHeadersMiddleware of the file apps/common/middleware/static_headers_middleware.py of the component Public Chat Interface. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used. Upgrading to version 2.8.0 is able to resolve this issue. The patch is identified as 026a2d623e2aa5efa67c4834651e79d5d7cab1da. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 18, 20261Panel is an open-source, web-based control panel for Linux server management.CVE-2026-23525 · Other software · 1Panel-dev · reported by GitHubMedium 6.4
1Panel is an open-source, web-based control panel for Linux server management. A stored Cross-Site Scripting (XSS) vulnerability exists in the 1Panel App Store when viewing application details. Malicious scripts can execute in the context of the user’s browser, potentially compromising session data or sensitive system interfaces. All versions of 1Panel up to and including v1.10.33-lts and v2.0.16 are affected. An attacker could publish a malicious application that, when loaded by users (locally or remotely), can execute arbitrary scripts. This may result in theft of user cookies, unauthorized access to system functions, or other actions that compromise the confidentiality, integrity, and availability of the system. The vulnerability is caused by insufficient sanitization of content rendered by the MdEditor component with the `previewOnly` attribute enabled. Specifically, the App Store renders application README content without proper XSS protection, allowing script execution during content rendering; and similar issues exist in system upgrade-related components, which can be fixed by implementing proper XSS sanitization in the MdEditor component. These vulnerabilities can be mitiga
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2025MaxKB is an open-source AI assistant for enterprise.CVE-2025-66446 · Other software · 1Panel-dev · reported by GitHubHigh 8.8
MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dynamic linker and other critical files, potentially resulting in privilege escalation. This issue is fixed in version 2.4.0.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2025MaxKB is an open-source AI assistant for enterprise.CVE-2025-66419 · Other software · 1Panel-dev · reported by GitHubHigh 8.8
MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 20251Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality.CVE-2025-34430 · Other software · LXware · reported by VulnCheckMedium 5.1
1Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality. The affected endpoint does not implement CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a panel-name change request; if a victim visits the page while authenticated, the browser includes valid session cookies and the request succeeds. This allows a remote attacker to change the victim’s panel name to an arbitrary value without consent.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 20251Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality.CVE-2025-34429 · Other software · LXware · reported by VulnCheckHigh 7
1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The port-change endpoint lacks CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a port-change request; when a victim visits it while authenticated, the browser includes valid session cookies and the request succeeds. This allows an attacker to change the port on which the 1Panel web service listens, causing loss of access on the original port and resulting in service disruption or denial of service, and may unintentionally expose the service on an attacker-chosen port.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 20251Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings paneCVE-2025-34410 · Other software · LXware · reported by VulnCheckHigh 7
1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel). The endpoint does not implement CSRF protections such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a username-change request; when a victim visits the page while authenticated, the browser includes valid session cookies and the request succeeds. This allows an attacker to change the victim’s 1Panel username without consent. After the change, the victim is logged out and unable to log in with the previous username, resulting in account lockout and denial of service.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 20251Panel is an open-source, web-based control panel for Linux server management.CVE-2025-66508 · Other software · 1Panel-dev · reported by GitHubMedium 6.5
1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies (TrustedProxies = 0.0.0.0/0), allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls (AllowIPs, API whitelists, localhost-only checks) rely on ClientIP(), attackers can bypass these protections by simply sending X-Forwarded-For: 127.0.0.1 or any whitelisted IP. This renders all IP-based security controls ineffective. This issue is fixed in version 2.0.14.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 20251Panel is an open-source, web-based control panel for Linux server management.CVE-2025-66507 · Other software · 1Panel-dev · reported by GitHubHigh 7.5
1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.13 and below allow an unauthenticated attacker to disable CAPTCHA verification by abusing a client-controlled parameter. Because the server previously trusted this value without proper validation, CAPTCHA protections can be bypassed, enabling automated login attempts and significantly increasing the risk of account takeover (ATO). This issue is fixed in version 2.0.14.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 13, 2025MaxKB is an open-source AI assistant for enterprise.CVE-2025-64703 · Other software · 1Panel-dev · reported by GitHubMedium 6.3
MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 13, 2025MaxKB is an open-source AI assistant for enterprise.CVE-2025-64511 · Other software · 1Panel-dev · reported by GitHubHigh 7.4
MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases through Python code in the tool module, although the process runs in a sandbox. Version 2.3.1 fixes the issue.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2025A vulnerability was determined in 1Panel-dev MaxKB up to 2.0.2/2.1.0.CVE-2025-10433 · Other software · 1Panel-dev · reported by VulDBLow 2.1
A vulnerability was determined in 1Panel-dev MaxKB up to 2.0.2/2.1.0. This issue affects some unknown processing of the file /admin/api/workspace/default/tool/debug. Executing manipulation of the argument code can lead to deserialization. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.1 is capable of addressing this issue. It is suggested to upgrade the affected component.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2025OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the /aCVE-2025-56413 · Other software · Fit2cloud · reported by MITREHigh 8.8
OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the /api/v2/hosts/ssh/operate endpoint.
- Product
- 1panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 1, 20251Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server.CVE-2025-54424 · Other software · 1Panel-dev · reported by GitHubHigh 8.1
1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate validation, leading to unauthorized interface access. Due to the presence of numerous command execution or high-privilege interfaces in 1Panel, this results in Remote Code Execution (RCE). This is fixed in version 2.0.6. The CVE has been translated from Simplified Chinese using GitHub Copilot.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 17, 2025MaxKB is an open-source AI assistant for enterprise.CVE-2025-53928 · Other software · 1Panel-dev · reported by GitHubMedium 4.6
MaxKB is an open-source AI assistant for enterprise. Prior to versions 1.10.9-lts and 2.0.0, a Remote Command Execution vulnerability exists in the MCP call. Versions 1.10.9-lts and 2.0.0 fix the issue.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 17, 2025MaxKB is an open-source AI assistant for enterprise.CVE-2025-53927 · Other software · 1Panel-dev · reported by GitHubMedium 4.6
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts the execution permissions of files in a specific directory. Therefore, an attacker can use the `shutil.copy2` method in Python to copy the command they want to execute to the executable directory. This bypasses directory restrictions and reverse shell. Version 2.0.0 fixes the issue.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 3, 2025MaxKB is an open-source AI assistant for enterprise.CVE-2025-48950 · Other software · 1Panel-dev · reported by GitHubMedium 5.8
MaxKB is an open-source AI assistant for enterprise. Prior to version 1.10.8-lts, Sandbox only restricts the execution permissions of binary files in common directories, such as `/bin,/usr/bin`, etc. Therefore, attackers can exploit some files with execution permissions in non blacklisted directories to carry out attacks. Version 1.10.8-lts fixes the issue.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2025A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7.CVE-2025-4546 · Other software · 1Panel-dev · reported by VulDBMedium 5.1
A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Knowledge Base Module. The manipulation leads to csv injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.10.8 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 10, 2025MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG).CVE-2025-32383 · Other software · 1Panel-dev · reported by GitHubMedium 4.3
MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG). A reverse shell vulnerability exists in the module of function library. The vulnerability allow privileged users to create a reverse shell. This vulnerability is fixed in v1.10.4-lts.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 2, 2025MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large language model and retrieval-augmented gCVE-2024-56137 · Other software · 1Panel-dev · reported by GitHubMedium 6.8
MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG). Prior to version 1.9.0, a remote command execution vulnerability exists in the module of function library. The vulnerability allow privileged users to execute OS command in custom scripts. The vulnerability has been fixed in v1.9.0.
- Product
- MaxKB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 25, 2024KubePi is a K8s panel.CVE-2024-36111 · Other software · 1Panel-dev · reported by GitHubMedium 6.3
KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token verification. The JWT key in the default configuration file is empty. Although a random 32-bit string will be generated to overwrite the key in the configuration file when the key is detected to be empty in the configuration file reading logic, the key is empty during actual verification. Using an empty key to generate a JWT token can bypass the login verification and directly take over the back end. Version 1.8.0 contains a patch for this issue.
- Product
- KubePi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 20241Panel is a web-based linux server management control panel.CVE-2024-39911 · Other software · 1Panel-dev · reported by GitHubCritical 10
1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent handling. This issue has been addressed in version 1.10.12-lts. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.mo60.cngithub.com
Jul 18, 20241Panel is a web-based linux server management control panel.CVE-2024-39907 · Other software · 1Panel-dev · reported by GitHubCritical 9.8
1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 14, 20241Panel is an open source Linux server operation and maintenance management panel.CVE-2024-34352 · Other software · 1Panel-dev · reported by GitHubMedium 6.5
1Panel is an open source Linux server operation and maintenance management panel. Prior to v1.10.3-lts, there are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. The mirror configuration write symbol `>` can be used to achieve arbitrary file writing. This vulnerability is fixed in v1.10.3-lts.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 18, 20241Panel is an open source Linux server operation and maintenance management panel.CVE-2024-30257 · Other software · 1Panel-dev · reported by GitHubLow 3.9
1Panel is an open source Linux server operation and maintenance management panel. The password verification in the source code uses the != symbol instead hmac.Equal. This may lead to a timing attack vulnerability. This vulnerability is fixed in 1.10.3-lts.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 9, 2024A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts.CVE-2024-2352 · Other software · fit2cloud · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the input 123123123\nopen -a Calculator leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-256304.
- Product
- 1panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 6, 20241Panel is an open source Linux server operation and maintenance management panel.CVE-2024-27288 · Other software · 1Panel-dev · reported by GitHubMedium 6.3
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page. The vulnerability has been fixed in v1.10.1-lts. There are no known workarounds.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 5, 20241Panel is an open source Linux server operation and maintenance management panel.CVE-2024-24768 · Other software · 1Panel-dev · reported by GitHubMedium 6.5
1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in plain text if accessed using HTTP. This issue has been patched in version 1.9.6.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 10, 20231Panel is an open source Linux server operation and maintenance management panel.CVE-2023-39966 · Other software · 1Panel-dev · reported by GitHubHigh 7.5
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the `api/v1/file.go` file, there is a function called `SaveContentthat,It `recieves JSON data sent by users in the form of a POST request. And the lack of parameter filtering allows for arbitrary file write operations. Version 1.5.0 contains a patch for this issue.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 10, 20231Panel is an open source Linux server operation and maintenance management panel.CVE-2023-39965 · Other software · 1Panel-dev · reported by GitHubMedium 6.5
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may cause a large amount of information leakage. Version 1.5.0 has a patch for this issue.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 10, 20231Panel is an open source Linux server operation and maintenance management panel.CVE-2023-39964 · Other software · 1Panel-dev · reported by GitHubHigh 7.5
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the `api/v1/file.go` file, there is a function called `LoadFromFile`, which directly reads the file by obtaining the requested path `parameter[path]`. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability. Version 1.5.0 has a patch for this issue.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 21, 2023KubePi is an opensource kubernetes management panel.CVE-2023-37917 · Other software · 1Panel-dev · reported by GitHubCritical 9.1
KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- KubePi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 21, 2023KubePi is an opensource kubernetes management panel.CVE-2023-37916 · Other software · 1Panel-dev · reported by GitHubMedium 6.5
KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- KubePi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 20231Panel is an open source Linux server operation and maintenance management panel.CVE-2023-37477 · Other software · 1Panel-dev · reported by GitHubHigh 7.2
1Panel is an open source Linux server operation and maintenance management panel. An OS command injection vulnerability exists in 1Panel firewall functionality. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. 1Panel firewall functionality `/hosts/firewall/ip` endpoint read user input without validation, the attacker extends the default functionality of the application, which execute system commands. An attacker can execute arbitrary code on the target system, which can lead to a complete compromise of the system. This issue has been addressed in commit `e17b80cff49` which is included in release version `1.4.3`. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 20231Panel is an open source Linux server operation and maintenance management panel.CVE-2023-36458 · Other software · 1Panel-dev · reported by GitHubMedium 6.3
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payloads to achieve command injection when entering the container terminal. The vulnerability has been fixed in v1.3.6.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 20231Panel is an open source Linux server operation and maintenance management panel.CVE-2023-36457 · Other software · 1Panel-dev · reported by GitHubMedium 6.3
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payload to achieve command injection when adding container repositories. The vulnerability has been fixed in v1.3.6.
- Product
- 1Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.