CVE-2026-5332

all versions

A vulnerability was identified in Xiaopi Panel 1.0.0. This vulnerability affects unknown code of the file /demo.php of the compone

3.5LOW

CVE-2026-26016

< 1.12.1

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.12.1, a mi

8.1HIGH

CVE-2026-2122

<= 2026-01-26

A security flaw has been discovered in Xiaopi Panel up to 20260126. This impacts an unknown function of the file /demo.php of the

6.3MEDIUM

CVE-2025-69198

< 1.12.0

Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to the total

6.5MEDIUM

CVE-2025-69197

< 1.12.0

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below allow TOTP to be used multiple times d

6.5MEDIUM

CVE-2025-68954

< 1.12.0

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP connections

5.4MEDIUM

CVE-2024-6877

< 2.3.24

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel a

6.1MEDIUM

CVE-2024-5960

< 2.3.24

Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials. This issue affects

9.8CRITICAL

CVE-2024-5959

< 2.3.24

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel a

5.4MEDIUM

CVE-2024-5958

< 2.3.24

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows C

8.8HIGH

CVE-2024-34067

< 1.11.6

Pterodactyl is a free, open-source game server management panel built with PHP, React, and Go. Importing a malicious egg or gainin

6.1MEDIUM

CVE-2021-41273

< 1.6.6

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. Due to improperly configured CSRF prot

4.3MEDIUM

CVE-2021-41176

< 1.6.3

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. In affected versions of Pterodactyl a

4.3MEDIUM

CVE-2021-41129

>= 1.0.0 and < 1.6.2

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. A malicious user can modify the conten

8.1HIGH

CVE-2020-26255

< 2.5.14

Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.4.5, and Kirby Panel before version 2.5.14 , an editor with full acce

6.8MEDIUM

CVE-2020-26253

< 2.5.14

Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.3.6, and Kirby Panel before version 2.5.14 there is a vulnerability i

6.8MEDIUM

CVE-2019-1020002

< 0.7.14

Pterodactyl before 0.7.14 with 2FA allows credential sniffing.

7.5HIGH

CVE-2017-16807

< 2.3.3

A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when dis

5.4MEDIUM