2873 matches found
How to configure cPanel and WHM Panel on your VPS
By Owais Sultan What is VPS? VPS can be a great solution for the web presence of your business, blog, e-commerce,… This is a post from HackRead.com Read the original post: How to configure cPanel and WHM Panel on your VPS...
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2022-1873)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally...
[slackware-security] pidgin
New pidgin packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/pidgin-2.14.10-i586-1slack15.0.txz: Upgraded. This update fixes bugs and several security issues. For more information, see:...
Types of Web Hosting and How Much Does It Cost To Host A Website?
By Owais Sultan Hosting a website is not only about the domain name. It also includes web hosting services, which provide… This is a post from HackRead.com Read the original post: Types of Web Hosting and How Much Does It Cost To Host A Website?...
YODA Tool Found ~47,000 Malicious WordPress Plugins Installed in Over 24,000 Sites
As many as 47,337 malicious plugins have been uncovered on 24,931 unique websites, out of which 3,685 plugins were sold on legitimate marketplaces, netting the attackers $41,500 in illegal revenues. The findings come from a new tool called YODA that aims to detect rogue WordPress plugins and trac...
Malicious code in argo-hosting-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68219d5583bb3d47838918ac2c62f7ada7453a8cedfe80637c05a53b728a2707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1085 Malicious code in argo-hosting-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68219d5583bb3d47838918ac2c62f7ada7453a8cedfe80637c05a53b728a2707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EulerOS 2.0 SP3 : openssl098e (EulerOS-SA-2022-1754)
According to the versions of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli...
EulerOS 2.0 SP3 : openssl (EulerOS-SA-2022-1753)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally...
GHSA-GM5X-HPMW-XPXG Silverstripe CMS information disclosure
In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a domain is hosting a Silverstripe application. There is no disclosure of the specific version. The functionality on this URL path is limited to...
[slackware-security] mozilla-thunderbird
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-91.9.1-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For more...
CVE-2022-28921
A Cross-Site Request Forgery CSRF vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server...
Atmail Cross-Site Scripting Vulnerability (CNVD-2022-66695)
Atmail is an email hosting service from Atmail. Atmail version 6.5.0 contains a cross-site scripting vulnerability that originates from an incorrect parameter in index.php/admin/index/ and can be exploited to execute JavaScript code...
Parallels H-Sphere 跨站脚本漏洞
Parallels H-Sphere is a web-hosting automation control panel from Parallels, Inc. It is used for shared web hosting services. Parallels H-Sphere version 3.6.2 contains a cross-site scripting vulnerability that can be exploited by attackers to perform XSS via indexen.php in the parameters...
GHSA-4W62-CQ5R-5MMQ express-cart unrestricted file upload vulnerability
Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...
express-cart unrestricted file upload vulnerability
Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...
[slackware-security] openssl
New openssl packages are available for Slackware 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssl-1.1.1o-i586-1slack15.0.txz: Upgraded. Fixed a bug in the crehash script which was not properly sanitising shell...
Bore - Simple CLI Tool For Making Tunnels To Localhost
A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. Installation requires Rust cargo install bore-cli On your local machine bore local 8000 --to bore.pub This will expose your local...
The US Saw a Spike in Child Sexual Abuse URLs in 2021
CSAM hosting in the United States rose 64 percent last year, putting the country second in the world, a new report found...
Unable to create Azure hosting connection in On-Premise Studio
When trying to create a new Azure hosting connection in on-premise Studio, it may fail with the following error: Error Id: XDDS:09449CBF Exception: Error Source : Citrix Studio StackTrace: System.Net.WebException The remote server returned an error: 400 Bad Request. at System.Net.HttpWebRequest...