BSCW Server Remote Code Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authenticated RCE product: BSCW Server vulnerable version: BSCW Server =5.0.11, =5.1.9, =5.2.3, =7.3.2, =7.4.2 fixed version: 5.0.12, 5.1.10, 5.2.4, 7.3.3, 7.4.3 CVE...

CamPhish - Grab Cam Shots From Target'S Phone Front Camera Or PC Webcam Just Sending A Link.

Grab cam shots from target's phone front camera or PC webcam just sending a link. What is CamPhish? CamPhish is techniques to take cam shots of target's phone fornt camera or PC webcam. CamPhish Hosts a fake website on in built PHP server and uses ngrok & serveo to generate a link which we will...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38584

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

CVE-2021-38590

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...

CVE-2021-38587

In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files SEC-586...

CVE-2021-38586

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

CVE-2021-38588

In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...

CVE-2021-38589

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files SEC-588...

Command injection

In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...

Design/Logic Flaw

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

Design/Logic Flaw

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38586

CVE-2021-38586 affects cPanel prior to 98.0.1. The issue is in /scripts/cpan_config, performing unsafe operations on files (SEC-589). The NVD metrics show CVSSv2/2.0: Low (2.1) with local access; CVSSv3.1/3.1: Medium (4.4) with local access, high integrity impact. Exploitation details or remediat...

CVE-2021-38587

The CVE-2021-38587 entry concerns cPanel prior to 96.0.13. The affected component is the script fix-cpanel-perl, which mishandles the creation of temporary files (SEC-586). The underlying issue is a faulty handling of temporary-file creation, enabling an impact described in the sources. The publi...

CVE-2021-38588

In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...

CVE-2021-38590

CVE-2021-38590 affects cPanel before 96.0.8 where weak permissions on web statistics can lead to information disclosure (SEC-584). The vulnerability is caused by insufficient access controls on web stats, enabling local attackers to read information that should be restricted. Impact is informatio...

CVE-2021-38590

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...

Comment Highlighter <= 0.13 - Authenticated SQL Injection

A c GET parameter of the plugin is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. GET...

CVE-2020-7662

websocket-extensions npm module prior to 0.1.4 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...