Apache HTTP Server 2.4.49 - Path Traversal Vulnerability

Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal Exploit Author: Lucas Souza https://lsass.io Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE : CVE-2021-41773 Credits: Ash Daulton and the cPanel Security Team !/bin/bash if $1 =3D=3D '' ; $2 =3D=3D '' ; then ech...

Apache HTTP Server 2.4.49 Path Traversal

Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal Date: 10/05/2021 Exploit Author: Lucas Souza https://lsass.io Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE : CVE-2021-41773 Credits: Ash Daulton and the cPanel Security Team !/bin/bash if $1 =3D=3D '' ; $2...

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)

Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Date: 10/05/2021 Exploit Author: Lucas Souza https://lsass.io Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE : CVE-2021-41773 Credits: Ash Daulton and the cPanel Security Team...

Apache Web Server Zero-Day Actively Exploited, Exposes Sensitive Data

Apache Software has quickly issued a fix for a zero-day security bug in the Apache HTTP Server, which was first reported to the project last week. The vulnerability is under active exploitation in the wild, it said, and could allow attackers to access sensitive information. According to a securit...

cPanel Information Disclosure Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. An information disclosure vulnerability exists in cPanel versions prior to 96.0.8. The vulnerability stems from weak privileges on web statistics. An attacker can exploit this vulnerability to obtain information...

cPanel XXE vulnerability

cPanel is a web-based host control management system from cPanel USA. cPanel versions prior to 98.0.1 have an XXE vulnerability in the WHM Locale Upload feature. No detailed vulnerability details are currently available...

CVE-2021-38590

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38588

In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...

CVE-2021-38584

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

CVE-2021-38586

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

CVE-2021-38589

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files SEC-588...

CVE-2021-38587

In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files SEC-586...

CVE-2021-38584

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

CVE-2021-38588

In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...

CVE-2021-38590

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38586

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

CVE-2021-38587

In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files SEC-586...

CVE-2021-38589

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files SEC-588...