Hacker Infrastructure and Underground Hosting 101

Ever wonder how cybercriminals host content on the internet without a takedown or an arrest, and what makes them difficult to track down? We have the answers and insights...

Design/Logic Flaw

interface/new/newcomprehensivesave.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution RCE on the hosting webserver by uploading a maliciously crafted image...

CVE-2020-23829

interface/new/newcomprehensivesave.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution RCE on the hosting webserver by uploading a maliciously crafted image...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.12.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

Server-Side Request Forgery (SSRF)

ftp-srv is vulnerable to server-side request forgery. A remote client is able to submit requests on behalf of the server and access resources within the internal network accessible by the server, including private resources in the hosting environment...

Citrix Cloud - Hosting connection to VMWare vCenter Server fails after certificate update

Hosting connection to VMWare vCenter Server fails after certificate update...

CentOS Web Panel Operating System Command Injection Vulnerability (CNVD-2020-44602)

CentOS Web Panel CWP is a free web hosting control panel. An operating system command injection vulnerability exists in the ajaxmodsecurity.php file in the CentOS Web Panel cwp-el7-0.9.8.891 release, which stems from a failure to properly validate user-supplied strings before executing system...

CVE-2020-15612 — CentOS Web Panel Authentication Bypass/RCE

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxftpmanager.php. When parsing the userLogin parameter, the process...

Koken CMS 0.22.24 Shell Upload

Exploit Title: Koken CMS 0.22.24 - Arbitrary File Upload Authenticated Date: 2020-07-15 Exploit Author: v1n1v131r4 Vendor Homepage: http://koken.me/ Software Link: https://www.softaculous.com/apps/cms/Koken Version: 0.22.24 Tested on: Linux PoC:...

This Week in Security News: Trend Micro Research Uncovers the Business Infrastructure of Cybercrime and Apple Launches Security Device Research Program

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read new insights from Trend Micro that look at the market for underground hosting services and where cybercriminals rent the infrastructure...

SQL Injection Vulnerability in Anshan Guangwu Network Technology Co.

Anshan Guangwu Network Technology Co., Ltd. mainly provides website production and hosting maintenance, domain name registration services and network marketing and promotion programs. Anshan Guangwu Network Technology Co., Ltd. website building system SQL injection vulnerability, attackers can us...

Cloud hosting firm Blackbaud pays ransom after thwarting ransomware attack

By Deeba Ahmed Blackbaud claims it paid a ransom to protect customer data. This is a post from HackRead.com Read the original post: Cloud hosting firm Blackbaud pays ransom after thwarting ransomware attack...

CVE-2020-6164

In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a domain is hosting a Silverstripe application. There is no disclosure of the specific version. The functionality on this URL path is limited to...

CVE-2020-6164

CVE-2020-6164 (SilverStripe) affects SilverStripe up to version 4.5.0. A preconfigured URL path in the silverstripe/framework module can disclose that a domain is hosting a SilverStripe application. The impact is information disclosure about the existence of the platform; the path’s functionality...

CVE-2020-7693

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

Code injection

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

[slackware-security] libjpeg-turbo

New libjpeg-turbo packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libjpeg-turbo-2.0.5-i586-1slack14.2.txz: Upgraded. This update fixes bugs and a security issue: Fixed an issue in the PPM read...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.71.0-i586-1slack14.2.txz: Upgraded. This update fixes security issues: curl overwrite local file with -J 111 Partial...

Unspecified Vulnerability in Mattermost Plugins

Mattermost is a private cloud messaging solution provider. A security vulnerability in Mattermost Plugins can be exploited by an attacker to attach their Mattermost account to another user's GitHub account...

Gogs has an unspecified vulnerability

Gogs Go Git Service is a Go-based self-service Git hosting service , which supports creating and migrating public/private repositories , adding and removing repository collaborators and so on. A security vulnerability exists in MakeEmailPrimary in the models/usermail.go file in Gogs version...