3184 matches found
blog.wpxhosting.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1164829 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
ACal 2.2.6 Remote Code Execution Exploit
Exploit Title: ACal v2.2.6 - 1-Click Remote Code Execution Exploit Author: Bobby Cooke Date: May 14th, 2020 Vendor Homepage: http://acalproj.sourceforge.net/ Software Link: http://prdownloads.sourceforge.net/acalproj/ACal-2.2.6.tar.gz?download Version: 2.2.6 Tested On: Windows 10 Pro 1909 x6486 +...
Plesk/myLittleAdmin ViewState .NET Deserialization
This module exploits a ViewState .NET deserialization vulnerability in web-based MS SQL Server management tool myLittleAdmin, for version 3.8 and likely older versions, due to hardcoded parameters in the web.config file for ASP.NET. Popular web hosting control panel Plesk offers myLittleAdmin as ...
b3.hosting Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1160530 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
DigitalOcean Data Leak Incident Exposed Some of Its Customers Data
DigitalOcean, one of the biggest modern web hosting platforms, recently hit with a concerning data leak incident that exposed some of its customers' data to unknown and unauthorized third parties. Though the hosting company has not yet publicly released a statement, it did has started warning...
BlueOnyx 5209R Cross-Site Request Forgery Vulnerability
BlueOnyx 5209R is an open source web hosting solution. The product includes email, DNS and file transfer services, among others. A cross-site request forgery vulnerability exists in the /login URI in BlueOnyx 5209R. The vulnerability stems from a WEB application that does not adequately validate...
GoDaddy suffers data breach after hackers access SSH accounts
By Deeba Ahmed GoDaddy Admits Data Breach Affecting Web Hosting Account Credentials of Unknown Number of Customers. This is a post from HackRead.com Read the original post: GoDaddy suffers data breach after hackers access SSH accounts...
GoDaddy Hack Breaches Hosting Account Credentials
UPDATE GoDaddy, the world’s largest domain name registrar, is warning customers that attackers may have obtained their web hosting account credentials. An “unauthorized individual” was able to access users’ login details in an intrusion that the company said took place back in October — the compa...
[slackware-security] seamonkey
New seamonkey packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/seamonkey-2.53.2-i686-1slack14.2.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...
SQL Injection Vulnerability in Star Outlook Web Hosting Management System
Star Outlook Web Hosting Management System is the most secure and fully automated web hosting management system. The StarWorld Web Hosting Management System has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
DeathRansom - A Ransomware Developed In Python, With Bypass Technics, For Educational Purposes
What is a ransomware? A ransomware is malware that encrypts all your files and shows a ransom request, which tells you to pay a set amount, usually in bitcoins BTC, in a set time to decrypt your files, or he will delete your files. How it works? First, the script checks if it's in a sandbox,...
CVE-2020-10507
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload RCE , that would allow attackers to gain access in the hosting machine...
Unrestricted file upload
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload RCE , that would allow attackers to gain access in the hosting machine...
CVE-2020-10507 ALLE INFORMATION CO., LTD. School Manage System - Security Misconfiguration
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload RCE , that would allow attackers to gain access in the hosting machine...
CVE-2020-10507: Unrestricted Upload of File with Dangerous Type
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload RCE , that would allow attackers to gain access in the hosting machine...
PT-2020-12177
Name of the Vulnerable Software and Affected Versions The School Manage System versions prior to 2020 Description The issue is related to an unrestricted file upload vulnerability, which allows attackers to gain access to the hosting machine. This is due to a misconfigured file upload filter that...
Stop error 0x9E and failover cluster can't come online in Windows Server 2012
Stop error 0x9E and failover cluster can't come online in Windows Server 2012 Symptoms This issue occurs when the following conditions are true: You have a Network File System NFS file server which is hosted on a two-node Windows Server 2012-based clustered storage server. You have the Data...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.7.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.6.1esr-i686-1slack14.2.txz: Upgraded. This release contains critical security fixes and improvements. "Und...
