CVE-2015-8994

Removed by vendor...

CVE-2015-8994

An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/modphp or php-fpm with OpCache enabled. With 5.x after 5.6.28 or 7.x after 7.0.13, the issue is resolved in a non-default configuration with the opcache.validatepermission=1 setting. The vulnerability details a...

PT-2017-1613 · Zend Technologies +4 · Zend Opcache +6

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.6.28 PHP versions prior to 7.0.13 Description: The issue exists due to inadequate access control when inheriting certain classes related to operational code in PHP configurations using apache2handler/mod php or php-fpm...

Anonymous Hacker took down over 10,000 Dark Web Sites; Leaked User Database

Dark Web is right now going through a very rough time. Just two days ago, a hacker group affiliated with Anonymous broke into the servers of Freedom Hosting II and took down more than 10,000 Tor-based .onion dark websites with an alarming announcement to its visitors, which said: "Hello, Freedom...

MC Hosting Coupons Script - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Vulnerability: Cross-Site Request Forgery Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Hosting Coupons Script Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881 Author: İhsan Şencan Author...

MC Hosting Coupons Cross-Site Request Forgery Vulnerability

MC Hosting Coupons is a PHP script for managing coupons. A cross-site request forgery vulnerability exists in MC Hosting Coupons. An attacker can exploit the vulnerability to trick users into clicking on it to obtain sensitive user information...

MC Hosting Coupons Script - Cross-Site Request Forgery

MC Hosting Coupons Script - Cross-Site Request Forgery Vulnerability: Cross-Site Request Forgery Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Hosting Coupons Script Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881 Author: İhsan Şencan Author...

MC Hosting Coupons Cross Site Request Forgery

Vulnerability: Cross-Site Request Forgery Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Hosting Coupons Script Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881 Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktan...

MC Hosting Coupons Script - Cross-Site Request Forgery

Vulnerability: Cross-Site Request Forgery Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Hosting Coupons Script Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881 Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Airbnb Clone Script - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: Airbnb Clone Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/airbnb-clone/ Script Name: Airbnb Clone Script Script Buy Now:...

cPanel Cross Domain Scripting / Information Disclosure

=== Introduction === cPanel offers web hosting software that automates the intricate workings of web hosting servers. cPanel equips server administrators with the necessary tools to provide top-notch hosting to customers on tens of thousands of servers worldwide. === Description === I Cross Domai...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.10.4P5-i586-1slack14.2.txz: Upgraded. This update fixes a denial-of-service vulnerability. An...

DirectAdmin Denial of Service Vulnerability

DirectAdmin is a set of foreign development features very strong web hosting online management system, through this management system you can easily manage your server, set up EMAIL, set up DNS, open FTP, online file management, database management, etc., to facilitate administrators, customers a...

hostgator.com XSS vulnerability

Vulnerable URL: http://www.hostgator.com/reseller-hosting?alert/OPENBUGBOUNTY/...

hostgator.com XSS vulnerability

Open Bug Bounty ID: OBB-199623 Description| Value ---|--- Affected Website:| hostgator.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-9199

A vulnerability in the Cisco application-hosting framework CAF of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vulnerability affects specific releases of the Cisco IOx subsystem of Cisco IOS and IOS XE Software. More...

CVE-2016-9199

A vulnerability in the Cisco application-hosting framework CAF of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vulnerability affects specific releases of the Cisco IOx subsystem of Cisco IOS and IOS XE Software. More...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-45.6.0esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For mo...

Cisco IOx Application-Hosting Framework Directory Traversal Vulnerability

A vulnerability in the Cisco application-hosting framework CAF of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

forum.gsmhosting.com Open Redirect vulnerability

Vulnerable URL: http://forum.gsmhosting.com/vbb/redirect-to/?redirect=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...