CVE-2024-8767

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 619, Acronis Backup extension for Plesk Linux before build 555, Acronis Backup plugin for DirectAdmin Linux before...

CVE-2024-8767

CVE-2024-8767 affects Acronis Backup plugins/extensions for Linux: cPanel & WHM plugin (pre-619), Plesk extension (pre-555), and DirectAdmin plugin (pre-147). Root cause is unnecessary privilege assignment that enables sensitive data disclosure and data manipulation with network access and low pr...

CVE-2024-8767

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 619, Acronis Backup extension for Plesk Linux before build 555, Acronis Backup plugin for DirectAdmin Linux before...

How to configure cPanel and WHM Panel on your VPS

By Owais Sultan What is VPS? VPS can be a great solution for the web presence of your business, blog, e-commerce,… This is a post from HackRead.com Read the original post: How to configure cPanel and WHM Panel on your VPS...

cPanel XXE vulnerability

cPanel is a web-based host control management system from cPanel USA. cPanel versions prior to 98.0.1 have an XXE vulnerability in the WHM Locale Upload feature. No detailed vulnerability details are currently available...

CVE-2021-38584

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

Design/Logic Flaw

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

Design/Logic Flaw

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38584

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

CVE-2021-38584

The CVE-2021-38584 issue affects the cPanel WHM Locale Upload feature in cPanel before 98.0.1. Root cause: an XXE vulnerability in the Locale Upload processing. Impact: XXE attacks could be triggered through the Locale Upload feature. Remediation: upgrade to cPanel 98.0.1 or later (patch mentione...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38585

CVE-2021-38585 describes a vulnerability in the WHM Locale Upload feature of cPanel, where versions before 98.0.1 are susceptible to unserialization attacks (SEC-585). The issue stems from an unserialization flaw in the locale upload flow, enabling attackers to potentially exploit the component. ...

Vulnerability allowed bypassing 2FA in WHM & cPanel by bruteforcing

By Sudais Asif The vulnerability CVE-2020-27641 allowed malicious actors to bypass two-factor authentication 2FA on the software using brute-force attacks. This is a post from HackRead.com Read the original post: Vulnerability allowed bypassing 2FA in WHM & cPanel by bruteforcing...

CVE-2020-29137

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

CVE-2020-29137

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

Design/Logic Flaw

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

CVE-2020-29137

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

CVE-2020-29137

CVE-2020-29137 affects cPanel prior to 90.0.17, with a self‑XSS vulnerability in the WHM Transfer Tool interface (SEC-577). The issue is limited to the Transfer Tool’s UI and is triggered by user input that could execute script in the victim’s browser. Exploitation details are not provided in the...