Cops Take Over a Botnet to Clear Malware Off Nearly a Million PCs

Attacking Iran, a web host data breach, and more of the week's top security news...

cPanel cross-site scripting vulnerability (CNVD-2019-29012)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in WHM Account Transfer in versions prior to cPanel 68.0.27. The vulnerability stems...

cPanel cross-site scripting vulnerability (CNVD-2019-30470)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Repair Mailbox Permissions interface in versions prior to cPanel 60.0.25...

CVE-2016-10776

cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination SEC-174...

CVE-2017-18457

cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs SEC-218...

CVE-2017-18408

cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces SEC-282...

CVE-2018-20951

cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...

CVE-2016-10827

cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...

CVE-2018-20935

cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...

CVE-2018-20925

cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface SEC-379...

CVE-2018-20921

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...

CVE-2018-20910

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...

CVE-2018-20866

cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature SEC-461...

DomainMOD 4.11.01 - 'assets/edit/host.php?whid=5' Cross-Site Scripting

Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting Date: 2018-11-22 Exploit Author: Mohammed Abdul Kareem Vendor Homepage: domainmod https://domainmod.org/ Software Link: domainmod https://github.com/DomainMod/DomainMod Version: v4.09.03 to v4.11.01 CVE : CVE-2018-19915 A Stored Cross-site...

DomainMOD 4.11.01 - assetsedithost.php?whid5 Cross-Site Scripting

DomainMOD 4.11.01 - assetsedithost.php?whid5 Cross-Site Scripting Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting Date: 2018-11-22 Exploit Author: Mohammed Abdul Kareem Vendor Homepage: domainmod https://domainmod.org/ Software Link: domainmod https://github.com/DomainMod/DomainMod Versio...

DomainMOD cross-site scripting vulnerability (CNVD-2019-07968)

DomainMOD is an open source application for managing your domain names and other Internet assets in a central location. A cross-site scripting vulnerability exists in DomainMOD versions 4.11.01 and earlier, which can be exploited by an attacker via the assets/edit/host.php Web Host Name or Web Ho...

CVE-2018-19915

DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field...

Default credentials

DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field...

CVE-2018-19915

CVE-2018-19915 affects DomainMOD up to version 4.11.01. The vulnerability is a stored XSS via the assets/edit/host.php Web Host Name or Web Host URL fields, allowing execution of arbitrary JavaScript in an authenticated user context and potentially session-related impacts. The issue is documented...

Web Host Asked to handover IP Addresses of Anti-Trump Website Visitors

By Waqas In total, the government of United States is asking for This is a post from HackRead.com Read the original post: Web Host Asked to handover IP Addresses of Anti-Trump Website Visitors...