1563 matches found
PT-2019-6741
Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.2.2 Description The issue allows users to see hidden courses through the overview report and is also vulnerable to information disclosure because course backups include users' private files. Recommendations For...
CVE-2012-1156: Insertion of Sensitive Information into Log File
Moodle before 2.2.2 has users' private files included in course backups...
CISA Launches “Cyber Essentials” for Small Businesses and Small SLTT Governments
The Cybersecurity and Infrastructure Security Agency CISA has launched Cyber Essentials, an effort to assist small organizations in understanding and addressing cybersecurity risks. Developed in partnership with small businesses and small state, local, tribal, and territorial SLTT governments,...
U.S. Dept Of Defense: Directory Indexing on the ████ (https://████/) leads to the backups disclosure and credentials leak
Description During poking around █████████/24 range - █████ looking for the Cisco devices, I came across █████ which resolved to the https://██████/ While it's a not .mil host, it's likely related to the DoD since it hosted in the DoD-controlled ASN. I discovered few critical vulnerabilities here...
CVE-2019-11029
Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This...
cPanel Authorization Issues Vulnerability (CNVD-2019-29606)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. The security vulnerability in cPanel versions prior to 68.0.15 stems from the program assigning weak privileges for...
cPanel Privilege Permission and Access Control Issues Vulnerability (CNVD-2019-29608)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 68.0.15, which stems from the program writing backup files o...
CVE-2017-18390
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...
CVE-2017-18383
cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...
CVE-2017-18383
cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...
Design/Logic Flaw
cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...
Code injection
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...
CVE-2017-18390
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...
CVE-2017-18390
CVE-2017-18390 affects cPanel prior to 68.0.15. It enables code execution in the root context due to weak permissions on incremental backups (SEC-322). The vulnerability is documented as high-severity with local access requirements. Remediation: upgrade to 68.0.15 or later. Exploitation details a...
PT-2019-8325
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows code execution in the context of the root account due to weak permissions on incremental backups. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later t...
PT-2019-8318
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows cPanel to write home-directory backups to an incorrect location. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...
CVE-2017-18390: Undefined Security Weakness
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...
CVE-2017-18383: Undefined Security Weakness
cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...