CVE-2016-10805

cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajaxmaketextsyntaxutil.pl SEC-109...

PT-2019-7601

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue allows demo accounts to execute arbitrary code. This is achieved through the ajax maketext syntax util.pl script. Recommendations For versions prior to 57.9999.54, update to version...

KDE 4/5 KDesktopFile Command Injection

| | | | | / \ '/ \ | |/ | | / / / | | || | | | /|| |/|| https://zero.lol zero days 4 days Title: KDE 4/5 KDesktopFile Command Injection Date: July 28th 2019 Author: Dominik Penner / zer0pwn Vendor Homepage: https://kde.org/ Software Link: https://cgit.kde.org Version: 5.60.0 and below...

CVE-2018-20944

cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test SEC-353...

CVE-2018-20911

cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...

CVE-2018-20911

cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...

Code injection

cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...

CVE-2018-20911

cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...

CVE-2018-20944: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test SEC-353...

CVE-2018-20911: Improper Neutralization of Input During Web Page Generation

cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...

PT-2019-10343

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows code execution due to "." being in @INC during a Perl syntax check of cpaddonsup. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the...

CVE-2019-14398

cPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajaxmaketextsyntaxutil.pl SEC-498...

PT-2019-13667

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 80.0.5 Description The issue allows demo accounts to execute arbitrary code. This is achieved through the ajax maketext syntax util.pl script. Recommendations For versions prior to 80.0.5, update to version 80.0.5 or...

SUSE SLED12 / SLES12 Security Update : spamassassin (SUSE-SU-2019:1961-1)

This update for spamassassin to version 3.4.2 fixes the following issues : Security issues fixed : CVE-2017-15705: Fixed denial of service via unclosed tags in crafted emails bsc1108745. CVE-2018-11781: Fixed a code injection in the meta rule syntax by local users bsc1108748. CVE-2018-11780: Fixe...

GitGot - Semi-automated, Feedback-Driven Tool To Rapidly Search Through Troves Of Public Data On GitHub For Sensitive Secrets

GitGot is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive secrets. How it Works During search sessions, users will provide feedback to GitGot about search results to ignore, and GitGot prunes the set of results. Users...

DEBIAN-CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...

UBUNTU-CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...

Python interpreter Syntax Analysis DoS

The vulnerability of the syntax analysis procedure for Python interpreter certificates is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

AZADMIN CMS Of HIDEA 1.0 SQL Injection

Sql Injection on AZADMIN CMS of HIDEA v1.0 + Date: 24/06/2019 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: https://www.hidea.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable Files: newsdet.php + Dork :...

[SECURITY] [DSA 4467-2] vim regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4467-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 23, 2019 https://www.debian.org/security/faq -...