PT-2024-15370 · Unknown · Huiran Host Reseller System

Name of the Vulnerable Software and Affected Versions: HuiRan Host Reseller System versions up to 2.0.0 Description: A vulnerability has been found in the HuiRan Host Reseller System, affecting an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler...

Malwarebytes wins 2023 CRN 'Coolest Endpoint And Managed Security Companies' award

CRN, a trusted source for IT channel news and analysis, has named Malwarebytes one of the "Coolest Endpoint And Managed Security Companies" on the 2023 CRN Security 100 list. The CRN Security 100 highlights channel-friendly cybersecurity vendors across a number of market segments including Endpoi...

Reseller role allowed to access to admin functionalities

Description The reseller user can access to some admin functionality just directly accessing to it by URL, even though the menu shouldn't allow it. Proof of Concept - Go to https://v2.demo.froxlor.org - Login as reseller1 - Point to: https://v2.demo.froxlor.org/adminopcacheinfo.php?page=showinfo...

The vulnerability of the Reseller Locator component in the Oracle Partner Management system allows a malicious actor to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Reseller Locator component in the Oracle Partner Management system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data using the HTTP...

Web Filtering & Compliances for Wi-Fi Providers

The demand for public Wi-Fi is increasing constantly due to the increase of smartphone owners and remote workers. Researchers at VPNMentor say that there are approximately 549 million Wi-Fi hotspots worldwide. Another survey by Semantic found that 87 percent of U.S. consumers have used the readil...

CVE-2022-21373

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Reseller Locator. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner...

Code injection

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Reseller Locator. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner...

CVE-2022-21373

CVE-2022-21373 affects Oracle E-Business Suite Partner Management (Reseller Locator). Affected versions are 12.2.3–12.2.11. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Partner Management, with human interaction required. Impacts include unauthor...

CVE-2022-21373

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Reseller Locator. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner...

SolarWinds APT Targets Tech Resellers in Latest Supply-Chain Cyberattacks

The SolarWinds attackers – an advanced persistent threat APT known as Nobelium – have started a new wave of supply-chain intrusions, this time using the technology reseller/service provider community to attack their targets. The activity has affected victims in North America and Europe thus far,...

CVE-2021-26266

cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...

CVE-2021-26266

cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...

Authentication flaw

cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...

CVE-2021-26266

CVE-2021-26266 affects cPanel prior to 92.0.9. The issue allows a Reseller to bypass the suspension lock (SEC-578). The connected documents consistently describe the vulnerability in this product/version; no root-cause or exploit details are provided beyond the bypass of the suspension mechanism....

CVE-2021-26266

cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...

Microsoft Warns CrowdStrike of Hackers Targeting Azure Cloud Customers

New evidence amidst the ongoing probe into the espionage campaign targeting SolarWinds has uncovered an unsuccessful attempt to compromise cybersecurity firm Crowdstrike and access the company's email. The hacking endeavor was reported to the company by Microsoft's Threat Intelligence Center on...

Microsoft Warns CrowdStrike of Hackers Targeting Azure Cloud Customers

New evidence amidst the ongoing probe into the espionage campaign targeting SolarWinds has uncovered an unsuccessful attempt to compromise cybersecurity firm Crowdstrike and access the company's email. The hacking endeavor was reported to the company by Microsoft's Threat Intelligence Center on...

8x8: Admin Reseller Account Disclosure

The vendor that handles 8x8 Resellers had inadvertently exposed account credentials. The information was removed and credentials changed. Leaked admin account of third party reseller in github with full access to all files...

CVE-2020-10120

cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell SEC-545...

Veeam Availability Console v3 Patch 4 (build 2795)

Challenge Veeam Availability Console v3 Patch 4 build 2795. This update supersedes Veeam Availability Console v3 Patch 3 build 2762. Cause Please confirm you are running version 3.0.0.2647 or later prior to installing this Patch 4. You can check this under Windows Programs and features. After...